Issues

• test: authorization, pause-tier and freeze-matrix suites (test_auth.rs, test_pause_tiers.rs, test_freeze_matrix.rs) are never compiled

  access-controlarea:testing-infrapriority:mediumStellar Wavetesting
  RevoraOrg/Revora-Contracts#1354 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3

  

• test: four test modules call contract client methods with outdated signatures and fail to compile

  area:testing-infrapriority:mediumStellar Wavetestingtests
  RevoraOrg/Revora-Contracts#1352 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3

  

• test(kani): kani_harness modules break the test build because they use std-only items in a no_std crate

  area:propertyarea:testing-infrapriority:mediumStellar Wavetesting
  RevoraOrg/Revora-Contracts#1351 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  6

  

• fix(deferred): the deferred-distribution queue can only grow; there is no dequeue/release path

  area:gasarea:storagebugpriority:mediumStellar Wave
  RevoraOrg/Revora-Contracts#1348 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3

  

• fix(events): several actions publish the same event topic twice with different payload shapes

  area:eventsarea:indexerbugpriority:mediumStellar Wave
  RevoraOrg/Revora-Contracts#1343 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3

  

• fix(compliance): offering whitelist is stored but never enforced

  access-controlarea:compliancebugpriority:mediumStellar Wave
  RevoraOrg/Revora-Contracts#1340 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3

  

• fix(offerings): duplicate register_offering silently returns Ok instead of OfferingAlreadyExists

  area:offeringsbugpriority:mediumStellar Wavetests
  RevoraOrg/Revora-Contracts#1332 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3

  

• fix(pause): safety role can lift an admin HardPause via unpause_safety

  access-controlarea:adminbugpriority:mediumStellar Wave
  RevoraOrg/Revora-Contracts#1330 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  4

  

• security(dispute): any holder with 1 bps can freeze all claims for an offering, and only the disputed issuer can lift it

  area:claimsarea:governancepriority:highsecurityStellar Wave
  RevoraOrg/Revora-Contracts#1328 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3

  

• perf(wasm): extract blacklist/whitelist/jurisdiction/transfer-restriction compliance into a separate contract

  area:compliancearea:gasgas-optimizationpriority:highStellar Wave
  RevoraOrg/Revora-Contracts#1327 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3

  

• feat(build): wire revenue_deposit_contract.rs into the build as its own deployable crate

  area:cienhancementpriority:highSorobanStellar Wave
  RevoraOrg/Revora-Contracts#1325 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  4

  

• security(vesting): schedules are keyed only by beneficiary, so any address can block a beneficiary from ever receiving a schedule

  access-controlarea:vestingpriority:highsecurityStellar Wave
  RevoraOrg/Revora-Contracts#1323 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  4

  

• security(redemption): fulfill_redemption pays issuer-chosen amounts out of the pooled contract balance

  access-controlarea:claimspriority:highsecurityStellar Wave
  RevoraOrg/Revora-Contracts#1321 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3

  

• security(snapshot): verify_snapshot_proof returns Ok for any proof and never checks it against the committed snapshot

  area:securitypriority:highsecuritysmart-contractStellar Wave
  RevoraOrg/Revora-Contracts#1319 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3

  

• feat(fees): platform fee is computed and emitted but never collected or deducted

  area:feesarea:revenueenhancementpriority:mediumStellar Wave
  RevoraOrg/Revora-Contracts#1318 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3

  

• fix(report): overriding a revenue report adds the full new amount to accrual indexes instead of the delta

  area:matharea:revenuebugpriority:highStellar Wave
  RevoraOrg/Revora-Contracts#1317 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3

  

• fix(claim): payout is computed in normalized 7-decimal units but transferred in native token units

  area:claimsarea:mathbugpriority:highStellar Wave
  RevoraOrg/Revora-Contracts#1311 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3

  

• fix(storage): no persistent entry ever extends its TTL, so offerings, periods and holder balances will be archived

  area:storagebugpriority:highSorobanStellar Wave
  RevoraOrg/Revora-Contracts#1310 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3

  

• security(init): initialize has no authorization and silently no-ops, allowing admin front-running

  access-controlarea:adminpriority:highsecurityStellar Wave
  RevoraOrg/Revora-Contracts#1309 · Filter by author thlpkee20-wq opened on Oct 18, 2026
  3