konfirm-contracts good first issues (Rust)

mark_refunded rewrites the entire PaymentRecord to flip one boolean 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

payment::unpause's event omits the acting admin 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Treasury proposed/approved events never record which signer acted 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

compliance::require_admin returns an Address no call site ever uses 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

compliance.rs doc-comment coverage is 2 of 9 functions 3 days ago

documentation good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

claim_payload makes 7 host calls to build a 47-byte buffer on the hottest path 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Suspected: record_payment's 5 flat params may be cleaner as an input struct 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

HeldFrom(channel_id) is the only persistent key never TTL-extended — a held channel can get permanently stuck 3 days ago

bug good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

channel's open_count cap has zero mutation coverage — the counter can be gutted and nothing fails 3 days ago

bug good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

set_admin events (payment, channel, compliance) record the new admin but never the outgoing one 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Auth checked before the cheap pause check on 4 entry points 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

finalize_close's closed event omits the refunded remainder, payer, and final claimed total 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

treasury::approve_settlement's approved event omits the approving signer 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

top_up's event emits the delta, not the channel's new deposited total 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

payment's mark_refunded/void_payment events omit both the acting admin and the amount 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

compliance's Allowed storage key is written on every mutation but never read 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

README's Known Limitations omits the no-delegated-closer gap already documented in konfirm-backend 3 days ago

documentation good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

README's deploy walkthrough omits treasury's Vec<Address> CLI syntax and token sourcing 3 days ago

documentation good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

SettlementStatus::Cancelled is a dead enum variant — no cancellation path exists 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Suspected: no reservation accounting lets concurrent pending settlements jointly exceed balance 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Test open_and_checkpoint_transfers_funds never calls checkpoint 3 days ago

good first issue testing priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

docs/architecture.md and CONTRIBUTING.md still say four contracts, omit the new contracts/common crate 3 days ago

documentation good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Suspected: Channel struct rewrites immutable fields on every high-frequency mutation 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

payment's restored ByTxHash dedup guard has no test that ever exercises the rejection path 3 days ago

bug good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

void_payment is the only mutator in the file with zero TTL extension — neither instance nor the Voided key 3 days ago

bug good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

check_pub_fn_auth.py is currently red on main — 7 violations, including a regressed doc tag from its own original fix 3 days ago

bug good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Issue #27's fix never added the negative-amount test its own title promised 3 days ago

bug good first issue testing

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Suspected: open_channel never validates payee != payer 3 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Fix inconsistent underscore grouping in test amount literals 6 days ago

enhancement good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

pause/unpause event emissions silently dropped in 3 of 4 contracts after a stale-branch merge 6 days ago

bug good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

channel's hold/release/set_token_allowed events omit the acting admin, and require_admin doesn't even return it 6 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

No contract exposes a getter for its own admin, and treasury exposes none for token/signers/threshold either 6 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

README's per-contract function tables are missing 6 current pub fns and under-describe 2 recently-changed behaviors 6 days ago

documentation good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

README's Tech stack test count and Project structure tree are both stale relative to the current 5-crate workspace 6 days ago

bug documentation good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

set_token_allowed(token, false) doesn't stop new deposits into existing open channels, undocumented anywhere 6 days ago

documentation enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

README's Known Limitations claims contracts aren't yet called from the live backend path — they are 6 days ago

documentation good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Treasury's signer set and threshold are permanently fixed at initialize — no rotation path, and lost-key recovery is undocumented 6 days ago

enhancement good first issue security priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

compliance's block/allow/clear events record the affected address but never the acting admin 6 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

treasury::initialize's O(n^2) duplicate-signer check exhausts the real mainnet CPU budget at ~1,034 signers 6 days ago

bug good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

treasury::initialize accepts an unvalidated, permanently-immutable token address — a wrong value strands real deposits forever 6 days ago

bug good first issue priority:critical

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

channel::initialize accepts challenge_period_secs=0 with no validation, fully defeating the challenge-period safety mechanism 6 days ago

bug good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

set_admin never extends the contract instance TTL in channel, compliance, or payment 6 days ago

bug good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

payment::unpause is missing the TTL extension that payment::pause (and every other contract's unpause) has 6 days ago

bug good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Unify ZeroAmount/ZeroDeposit error naming for amount<=0 checks 6 days ago

enhancement good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

execute_settlement event omits amount and merchant on the actual fund-transfer event 6 days ago

enhancement good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

record_payment event omits payer and tx_hash, the fields that make it verifiable 6 days ago

enhancement good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Tripwire: require a same-Env integration test when contracts first call each other 6 days ago

good first issue Stellar Wave testing priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Committed test_snapshots/*.json files are regenerated noise, never read back 6 days ago

enhancement good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

channel's top_up, hold_channel, and release_hold are never called by either repo 6 days ago

documentation good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Give channel a require_participant helper instead of inline checks 6 days ago

enhancement help wanted Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Add a setup() helper to channel's test module, unlike the other 3 contracts 6 days ago

good first issue Stellar Wave testing priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

contracttype struct fields have zero documentation, including non-obvious ones 6 days ago

documentation good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Track CodeQL/code-scanning adoption once Rust support matures 6 days ago

good first issue Stellar Wave security priority:critical

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Add issue and PR templates to standardize growing contributor base 6 days ago

documentation good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Treasury's Signers has no explicit max-length check in initialize 6 days ago

documentation enhancement good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

README's documented build command is rejected by the current stellar-cli 6 days ago

bug documentation good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Treasury's short-balance test doesn't distinguish a trap from a typed error 6 days ago

good first issue Stellar Wave testing priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

GitHub Actions in CI pinned by mutable tag rather than commit SHA 6 days ago

good first issue Stellar Wave security priority:critical

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Disable unused, empty wiki feature on repo 6 days ago

documentation good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Enable delete_branch_on_merge for repo hygiene 6 days ago

enhancement good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Record the commit/version a deployed address was built from 6 days ago

documentation good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Issue #6 was closed by documenting the gap, not fixing it — compliance still isn't called from payment/treasury/channel 6 days ago

bug good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

channel's token-allowlist fix has no surviving setter — open_channel is now permanently bricked for every token 6 days ago

bug good first issue Stellar Wave priority:critical

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

tx_hash dedup for record_payment was silently dropped by a later merge — DataKey::ByTxHash no longer exists 6 days ago

bug good first issue Stellar Wave priority:critical

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

treasury::execute_settlement's caller-authorization check was silently reverted — anyone can trigger a fund transfer 6 days ago

bug good first issue Stellar Wave priority:critical

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Unauthorized is never returned doc comment is now false for compliance and payment 6 days ago

bug good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

konfirm_common's require_admin and set_paused are imported by all 4 contracts but called by none 6 days ago

bug good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

open_count tracking exists but the per-payer channel cap is never enforced (plus a second, uncatalogued compile error) 6 days ago

bug good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

main branch does not compile — cargo test fails with 27 errors across all 4 contracts 6 days ago

bug good first issue Stellar Wave priority:critical

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

On-chain ABI metadata is 21-39% of each contract's deployed WASM size, with no CI visibility into the ratio 7 days ago

enhancement good first issue priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Add rustdoc to payment contract's public functions 7 days ago

documentation good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Add rustdoc to treasury contract's public functions 7 days ago

documentation good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

artifacts/addresses.json has a stale treasury address 7 days ago

documentation good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

PaymentError::ZeroAmount is also returned for negative amounts 7 days ago

good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

require_not_paused guard untested on 3 of 5 call sites 7 days ago

good first issue Stellar Wave testing priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Add SECURITY.md 8 days ago

documentation good first issue Stellar Wave priority:high

Konfirm-xyz/konfirm-contracts

0

Soroban smart contracts backing Konfirm, a non-custodial payment processor on Stellar.

Rust

Konfirm-xyz/konfirm-contracts

Open Issues Need Help