All issues

[Audit IF-005] Decryption/DKG proofs carry unbound party_id/node — any peer can mislabel a valid proof as another party's

#1728

· zahrajavar opened

on Jul 15, 2026

[Audit L-02] Verifier constructors accept zero/invalid trust anchors

#1726

· hmzakhalid opened

on Jul 15, 2026

[Audit L-01] Permissionless sale deployment can be front-run to consume the one-shot config

#1724

· hmzakhalid opened

on Jul 15, 2026

[Audit I-01] Production configuration and independent protocol assurance are incomplete

#1725

· hmzakhalid opened

on Jul 15, 2026

[Audit L-03] Core runtime bytecode has dangerously little release headroom

#1723

· hmzakhalid opened

on Jul 15, 2026

[Audit M-01] A stale exit-queue head permanently exhausts the 64-tranche cap

#1717

· hmzakhalid opened

on Jul 15, 2026

[Audit M-02] A shared claim flag destroys one entitlement for dual-role accounts

#1718

· hmzakhalid opened

on Jul 15, 2026

[Audit M-08] Bonding asset rotation can strand or mis-account outstanding balances

#1722

· hmzakhalid opened

on Jul 15, 2026

[Audit M-05] Failed slashed-fund routing is final and has no retry path

#1719

· hmzakhalid opened

on Jul 15, 2026

[Audit M-03] Mutable bonding thresholds leave cached active status and count stale

#1721

· hmzakhalid opened

on Jul 15, 2026

[Audit M-07] Refund/slash allocation changes apply retroactively to existing E3s

#1716

· hmzakhalid opened

on Jul 15, 2026

[Audit M-04] Dependency rotation is not snapshotted for in-flight E3s

#1720

· hmzakhalid opened

on Jul 15, 2026