Issues

• useTransaction.execute has no protection against overlapping calls; hash is not cleared when a new execution starts

  bugdifficulty: mediumpriority: mediumreliabilitysdk
  trustflow-protocol/trustflow-sdk#583 · Filter by author meshackyaro opened on Oct 21, 2026
  1

• useBalance never clears a stale error and loading can stay true forever when address becomes null mid-fetch

  bugdifficulty: mediumpriority: mediumreliabilitysdk
  trustflow-protocol/trustflow-sdk#582 · Filter by author meshackyaro opened on Oct 21, 2026
  1

• SDKLogger's redactContext redacts any field whose name merely contains 'key', including non-secret fields like publicKey

  bugdifficulty: easypriority: lowsdk
  trustflow-protocol/trustflow-sdk#581 · Filter by author meshackyaro opened on Oct 21, 2026
  1

• MultiSigEscrowClient.importState accepts a snapshot with an invalid operationType

  bugcoredifficulty: easypriority: lowsdk
  trustflow-protocol/trustflow-sdk#580 · Filter by author meshackyaro opened on Oct 21, 2026
  1

• SorobanContractClient.invoke() throws on any non-void return value; read() silently bypasses spec-based decoding

  bugcoredifficulty: mediumpriority: highreliabilitysdk
  trustflow-protocol/trustflow-sdk#579 · Filter by author meshackyaro opened on Oct 21, 2026
  1

• docs/guides/escrow-lifecycle.md passes a retry config with field names that don't exist on ApiRetryConfig

  bugdifficulty: easydocumentationpriority: mediumsdk
  trustflow-protocol/trustflow-sdk#578 · Filter by author meshackyaro opened on Oct 21, 2026
  1

• SorobanSpec.decodeReturnValue skips void-return validation whenever the function has input parameters

  bugcoredifficulty: easypriority: lowsdk
  trustflow-protocol/trustflow-sdk#577 · Filter by author meshackyaro opened on Oct 21, 2026
  1

• docs/ARCHITECTURE.md's module map and entry-points table omit src/testing/ and the published @trustflow/sdk/testing subpath

  difficulty: easydocumentationpriority: lowsdk
  trustflow-protocol/trustflow-sdk#576 · Filter by author meshackyaro opened on Oct 21, 2026
  1

• docs/QUICKSTART.md's EscrowMonitor example uses a non-existent event name and reads the payload from the wrong field

  bugdifficulty: easydocumentationpriority: mediumsdk
  trustflow-protocol/trustflow-sdk#575 · Filter by author coding-may opened on Oct 21, 2026
  1

• examples/tsconfig.json's baseUrl deprecation makes npm run examples:check fail before checking any example

  bugdifficulty: easyinfrastructurepriority: mediumsdk
  trustflow-protocol/trustflow-sdk#574 · Filter by author coding-may opened on Oct 21, 2026
  1

• src/stellar/* module (NetworkManager, fetchAccountInfo, submitTransaction, AccountBalanceMonitor) has no section in docs/API.md

  difficulty: mediumdocumentationpriority: mediumsdkStellar Wave
  trustflow-protocol/trustflow-sdk#573 · Filter by author meshackyaro opened on Oct 21, 2026
  7

• examples/react/src/App.tsx calls useWallet/useBalance/useEscrow with the wrong arguments and non-existent return/param fields

  bugdifficulty: mediumdocumentationpriority: mediumsdkStellar Wave
  trustflow-protocol/trustflow-sdk#572 · Filter by author meshackyaro opened on Oct 21, 2026
  7

• docs/API.md's Wallet Module section documents every wallet export except signWithFreighter/signMessageWithFreighter/signMessageWithKeypair

  difficulty: easydocumentationpriority: mediumsdkStellar Wave
  trustflow-protocol/trustflow-sdk#571 · Filter by author meshackyaro opened on Oct 21, 2026
  5

• docs/API.md: wrong maxFreeSockets default (10 vs real 256) and a syntax-invalid testing import example

  difficulty: easydocumentationgood first issuepriority: lowsdkStellar Wave
  trustflow-protocol/trustflow-sdk#570 · Filter by author meshackyaro opened on Oct 21, 2026
  7

• fetchWithTimeout silently discards a caller-supplied AbortSignal in init.signal

  bugdifficulty: mediumpriority: mediumreliabilitysdkStellar Wave
  trustflow-protocol/trustflow-sdk#569 · Filter by author meshackyaro opened on Oct 21, 2026
  7

• randomNonce() has modulo bias: characters A-H are ~25% more likely than any other character

  bugdifficulty: easypriority: mediumsdksecurityStellar Wave
  trustflow-protocol/trustflow-sdk#568 · Filter by author meshackyaro opened on Oct 21, 2026
  4

• isWalletRejection() is unreachable from @trustflow/sdk/wallet despite being designed as a public rejection-detection utility

  difficulty: easyenhancementgood first issuepriority: lowsdkStellar Wave
  trustflow-protocol/trustflow-sdk#567 · Filter by author meshackyaro opened on Oct 21, 2026
  7

• formatAmount() JSDoc example claims a ' XLM' suffix that the function never produces

  difficulty: easydocumentationgood first issuepriority: lowsdkStellar Wave
  trustflow-protocol/trustflow-sdk#566 · Filter by author meshackyaro opened on Oct 21, 2026
  6

• EscrowMonitor.addTopicFilter silently blocks all events for 3 of the 6 TrustFlowEventType values

  bugcoredifficulty: mediumpriority: mediumsdkStellar Wave
  trustflow-protocol/trustflow-sdk#565 · Filter by author meshackyaro opened on Oct 21, 2026
  4

• formatBytes() in src/utils/request-validation.ts prints "undefined" for sizes of 1TB or more

  bugdifficulty: easygood first issuepriority: lowsdkStellar Wave
  trustflow-protocol/trustflow-sdk#564 · Filter by author meshackyaro opened on Oct 21, 2026
  5

• WebAuthnManager is never exported from any public entry point — completely unreachable by SDK consumers

  bugdifficulty: easypriority: mediumsdkStellar Wave
  trustflow-protocol/trustflow-sdk#563 · Filter by author meshackyaro opened on Oct 21, 2026
  3

• Two independent, disagreeing CID validators exist: src/storage/cid.ts isValidCid vs src/utils/validation.ts isValidCID

  bugdifficulty: mediumpriority: mediumsdkStellar Wave
  trustflow-protocol/trustflow-sdk#562 · Filter by author meshackyaro opened on Oct 21, 2026
  3

• TransactionPipeline.execute()'s fee-bump sequence-reload path drops the Soroban resource footprint entirely

  bugcoredifficulty: hardpriority: highreliabilitysdkStellar Wave
  trustflow-protocol/trustflow-sdk#561 · Filter by author meshackyaro opened on Oct 21, 2026
  2

• PoolConfig.maxFreeSockets JSDoc describes request queueing, but it actually maps to Node's free-socket limit

  difficulty: easydocumentationpriority: lowsdkStellar Wave
  trustflow-protocol/trustflow-sdk#560 · Filter by author meshackyaro opened on Oct 21, 2026
  4

• useProfile: a concurrent update() can be clobbered by the in-flight fetch effect, since they don't share the same race guard

  bugdifficulty: mediumpriority: mediumsdkStellar Wave
  trustflow-protocol/trustflow-sdk#559 · Filter by author meshackyaro opened on Oct 21, 2026
  3