Issues

• allocations map retains released issues — phantom ledger drift

  MergeFi/contracts#608 · Filter by author yggdrasilworld opened on Oct 14, 2026
  3

• escrow::contribute and milestones::contribute accept new funds after deadline + GRACE_PERIOD, when anyone can already refund or cancel

  bug
  MergeFi/contracts#568 · Filter by author chonilius opened on Oct 13, 2026
  1

• Makefile deploy targets deploy the unoptimised .wasm — stellar contract optimize writes *.optimized.wasm

  buggood first issue
  MergeFi/contracts#567 · Filter by author chonilius opened on Oct 13, 2026
  1

• keep_alive never refreshes instance storage, so a contract kept alive only via keep_alive can still archive Admin/Oracle/Treasury

  bug
  MergeFi/contracts#566 · Filter by author chonilius opened on Oct 13, 2026
  1

• [Regression on closed #254] milestones::deallocate still has no test asserting admin authorization

  securitytesting
  MergeFi/contracts#565 · Filter by author chonilius opened on Oct 13, 2026
  1

• [Regression on closed #316] maintenance-pool::reclaim_deposit still has no test asserting the sponsor's own authorization

  securitytesting
  MergeFi/contracts#564 · Filter by author chonilius opened on Oct 13, 2026
  1

• [Regression on closed #315] maintenance-pool::recover_admin's only test still runs under mock_all_auths()

  securitytesting
  MergeFi/contracts#563 · Filter by author chonilius opened on Oct 13, 2026
  1

• [Regression on closed #314] milestones::recover_admin's only test still runs under mock_all_auths()

  securitytesting
  MergeFi/contracts#562 · Filter by author chonilius opened on Oct 13, 2026
  1

• maintenance-pool::set_treasury has no test proving it requires the admin's authorization

  securitytesting
  MergeFi/contracts#561 · Filter by author chonilius opened on Oct 13, 2026
  1

• maintenance-pool::deposit has no test proving it requires the sponsor's authorization

  securitytesting
  MergeFi/contracts#560 · Filter by author chonilius opened on Oct 13, 2026
  1

• maintenance-pool::pause has no test proving it requires the admin's authorization

  securitytesting
  MergeFi/contracts#559 · Filter by author chonilius opened on Oct 13, 2026
  1

• maintenance-pool::sweep has no test proving it requires the admin's authorization

  securitytesting
  MergeFi/contracts#558 · Filter by author chonilius opened on Oct 13, 2026
  1

• maintenance-pool::withdraw has no test proving it requires the oracle's authorization

  securitytesting
  MergeFi/contracts#557 · Filter by author chonilius opened on Oct 13, 2026
  1

• milestones::set_treasury has no test proving it requires the admin's authorization

  securitytesting
  MergeFi/contracts#556 · Filter by author chonilius opened on Oct 13, 2026
  1

• milestones::contribute has no test proving it requires the sponsor's authorization

  securitytesting
  MergeFi/contracts#555 · Filter by author chonilius opened on Oct 13, 2026
  1

• milestones::create_milestone has no test proving it requires the sponsor's authorization

  securitytesting
  MergeFi/contracts#554 · Filter by author chonilius opened on Oct 13, 2026
  1

• milestones::pause has no test proving it requires the admin's authorization

  securitytesting
  MergeFi/contracts#553 · Filter by author chonilius opened on Oct 13, 2026
  1

• milestones::cancel_milestone has no test proving it requires the admin's authorization

  securitytesting
  MergeFi/contracts#552 · Filter by author chonilius opened on Oct 13, 2026
  1

• milestones::allocate has no test proving it requires the admin's authorization

  securitytesting
  MergeFi/contracts#551 · Filter by author chonilius opened on Oct 13, 2026
  1

• milestones::release_issue has no test proving it requires the oracle's authorization

  securitytesting
  MergeFi/contracts#550 · Filter by author chonilius opened on Oct 13, 2026
  1

• escrow::contribute has no test proving it requires the sponsor's authorization

  securitytesting
  MergeFi/contracts#549 · Filter by author chonilius opened on Oct 13, 2026
  1

• escrow::fund has no test proving it requires the sponsor's authorization

  securitytesting
  MergeFi/contracts#548 · Filter by author chonilius opened on Oct 13, 2026
  1

• escrow::pause has no test proving it requires the admin's authorization

  securitytesting
  MergeFi/contracts#547 · Filter by author chonilius opened on Oct 13, 2026
  1

• escrow::refund has no test proving it requires the admin's authorization

  securitytesting
  MergeFi/contracts#546 · Filter by author chonilius opened on Oct 13, 2026
  1

• escrow::release has no test proving it requires the oracle's authorization

  securitytesting
  MergeFi/contracts#545 · Filter by author chonilius opened on Oct 13, 2026
  1