soroban-amm good first issues (Rust)

ci: add a curated mutation check for require_auth, deadline and slippage guards — today most can be deleted without failing a test 1 day ago

enhancement help wanted complexity: high phase: 4 priority: 3

promisszn/soroban-amm

1

Rust

pol_vesting: no test checks that governance-only functions require governance's signature — deleting all 7 require_auth calls leaves 43 tests green 1 day ago

enhancement help wanted complexity: medium phase: 3 priority: 2

promisszn/soroban-amm

1

Rust

reserve_manager: no test checks that governance-only functions require governance's signature — deleting all 6 require_auth calls leaves 56 tests green 1 day ago

enhancement help wanted complexity: medium phase: 3 priority: 3

promisszn/soroban-amm

1

Rust

twap_consumer: no test checks that snapshot and retention functions require the keeper's signature — deleting both require_auth calls leaves 41 tests green 1 day ago

enhancement help wanted complexity: medium phase: 3 priority: 3

promisszn/soroban-amm

1

Rust

incentive_campaigns: the NoLeftoverFunds guard that stops repeated recovery (#547) and the zero-LP-supply guard in claim_rewards are untested 1 day ago

enhancement help wanted complexity: medium phase: 3 priority: 2

promisszn/soroban-amm

1

Rust

batch_auction: anyone-can-cancel, expired and zero-amount orders and empty settlement are unguarded by tests — 5 guards can be deleted with all 40 tests green 1 day ago

enhancement help wanted complexity: medium phase: 3 priority: 2

promisszn/soroban-amm

1

Rust

token: negative mint/burn/lock/unlock amounts and over-locking can be unguarded without failing any of the 36 tests (9 guards untested) 1 day ago

enhancement help wanted complexity: medium phase: 3 priority: 2

promisszn/soroban-amm

1

Rust

factory: fee validation before charging, re-initialization and global-fee bounds can be deleted without failing a test (6 guards untested) 1 day ago

enhancement help wanted complexity: medium phase: 3 priority: 2

promisszn/soroban-amm

1

Rust

amm: every deadline check and the fee-on-transfer slippage checks can be deleted without failing a test (9 of 14 guards untested) 1 day ago

enhancement help wanted complexity: medium phase: 3 priority: 2

promisszn/soroban-amm

1

Rust

concentrated_liquidity: swap's min_amount_out and modify_position's min_a/min_b checks can be deleted without failing any of the 182 tests 1 day ago

enhancement help wanted complexity: medium phase: 3 priority: 1

promisszn/soroban-amm

1

Rust

governance: 12 of 17 proposal-lifecycle guards can be deleted with no test failing — including double voting, executing while voting is open, and executing a defeated proposal 1 day ago

enhancement help wanted complexity: medium phase: 3 priority: 1

promisszn/soroban-amm

1

Rust

staking: 11 of 36 guards can be deleted without failing a test, including the stored-admin checks on unpause, upgrade, update_rewards and set_max_reward_pool_balance 1 day ago

enhancement help wanted complexity: medium phase: 3 priority: 2

promisszn/soroban-amm

1

Rust

webhook-streamer: SSRF checks accept IPv4-mapped IPv6, .localhost and any DNS name, and delivery follows redirects into the private network 5 days ago

bug help wanted complexity: high Stellar Wave phase: 5 priority: 2

promisszn/soroban-amm

1

Rust

dex_aggregator: initialize and deadline use untyped/mislabelled errors, max_hops is unbounded, and config changes emit no events 5 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

dex_aggregator: CL hops choose zero_for_one by larger output, not by token_in — swap_best(B→A) paid A and received B; execute_route never validates the path 5 days ago

bug help wanted complexity: high phase: 3 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

batch_auction: the 'MEV-resistant' batch is a sequential loop — orders sandwich each other inside a batch, and the window never restarts after an idle period 5 days ago

bug help wanted complexity: high phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

batch_auction: no test checks that admin and venue functions require the admin's signature — deleting all 8 admin require_auth calls leaves 40 tests green 5 days ago

enhancement help wanted complexity: medium phase: 3 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

concentrated_liquidity: no test checks that admin functions require the admin's signature — deleting all 10 admin require_auth calls leaves 182 tests green 5 days ago

enhancement help wanted complexity: medium phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

amm: no test checks that admin functions require the admin's signature — deleting all 16 admin require_auth calls leaves 107 tests green 5 days ago

enhancement help wanted complexity: medium phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

incentive_campaigns: no pause and no upgrade — claims and campaign creation can't be halted if a reward token or accounting bug is found 5 days ago

enhancement help wanted complexity: medium phase: 3 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

amm: remove_liquidity and remove_liquidity_one_sided fail while paused, so a pause (or the auto-pause once fixed) traps all LP funds — concentrated_liquidity explicitly keeps exits open 5 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

governance: no test checks that admin functions require the admin's signature — deleting all 7 admin require_auth calls leaves 77 tests green 5 days ago

enhancement help wanted complexity: medium phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

token: no test checks that mint, burn and admin functions require the admin's signature — deleting all 7 require_auth calls leaves 36 tests green 5 days ago

enhancement help wanted complexity: medium phase: 3 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

examples/python: create_pool sends a fee in bps where the factory expects a tier 0-3, vote() encodes the choice as a bare symbol, and no test inspects the encoded arguments 5 days ago

bug help wanted complexity: medium phase: 4 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

batch_auction: no pause and no upgrade — settlement against venue pools can't be halted and the escrow contract can't be fixed in place 5 days ago

enhancement help wanted complexity: medium phase: 3 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

examples/flash_loan_receiver: anyone can call on_flash_loan and drain the receiver, initialize can be re-run to re-point it, and the README cites failure-mode tests that don't exist 5 days ago

bug help wanted complexity: medium phase: 4 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

sdk: AmmPool.getInfo() reports isPaused=false and name=null for every pool (the fields don't exist) and missing values decode as 0n 5 days ago

bug help wanted complexity: medium phase: 4 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

ui-components: GovernanceForum's status, vote and quorum model doesn't match the governance contract, and several dashboard figures are hard-coded literals 5 days ago

bug help wanted complexity: medium phase: 4 Stellar Wave priority: 4

promisszn/soroban-amm

1

Rust

ui-components: the three lib/ modules are never imported — components ship weaker private copies while the tests and coverage gate measure the dead ones 5 days ago

bug help wanted complexity: medium phase: 4 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

benches: most baselines are measured on natively-registered contracts, router and aggregator use WASM, and nothing checks cost against the network's per-transaction limit (aggregator swap_best is at ~86%) 5 days ago

enhancement help wanted complexity: medium phase: 4 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

ts-advanced-client: README promises validation and plugins that don't exist, a middleware that skips next() lets the transaction through, and nothing connects it to Soroban 5 days ago

enhancement help wanted complexity: medium phase: 4 Stellar Wave priority: 4

promisszn/soroban-amm

1

Rust

twal_consumer: the keeper can't be rotated or the contract upgraded, initialization isn't verified, and snapshots can be deleted down to nothing 5 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

cl_position_nft: initialization isn't verifiable, admin and cl_pool can't be rotated or upgraded, transfers skip metadata TTL bumps, and total_supply counts burned positions 5 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

batch_router: no admin role at all — it cannot be paused or upgraded, and its admin and factory can't be read back 5 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

deploy scripts: resumed runs reuse stale WASM hashes, post-deploy verification cannot fail, --default-seed is rejected by current CLIs, and mainnet gets no extra guard 5 days ago

bug help wanted complexity: medium phase: 4 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

twap_consumer: tracked pools can't be removed, one bad pool aborts get_twap_all for everyone, the set is uncapped and the keeper can't be rotated 5 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

health-dashboard: treats timestamps as milliseconds and raw token amounts as dollars, so ingested data shows 1970 dates and an empty heatmap 6 days ago

bug help wanted complexity: medium Stellar Wave phase: 5 priority: 3

promisszn/soroban-amm

1

Rust

amm: the k-of-n emergency guard can be disabled by the admin it guards against, and emergency withdrawals have no pause precondition or delay 6 days ago

bug help wanted complexity: high phase: 3 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

docs/abi.json lists 5 of 20 contracts with stale signatures, and scripts/check_abi.sh is never run in CI and points at a missing make target 6 days ago

bug help wanted complexity: medium phase: 4 Stellar Wave priority: 4

promisszn/soroban-amm

1

Rust

release.yml has never run and would publish untested, unlocked builds that include the flash-loan example and the SDK library as contracts 6 days ago

bug help wanted complexity: medium phase: 4 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

BRANCH_PROTECTION.md lists check names GitHub never reports and omits four real checks, and nothing verifies the list against ci.yml 6 days ago

bug help wanted complexity: medium phase: 4 Stellar Wave priority: 4

promisszn/soroban-amm

1

Rust

repo: 3,026 generated test_snapshots files (771 MB) are tracked, along with an orphaned 1,524-line old_cl.rs and a stale example copy 6 days ago

enhancement help wanted complexity: medium phase: 4 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

docs: the README and guides' create_pool, initialize, vote, pause and on_flash_loan examples don't match the built contracts, and nothing checks them 6 days ago

bug help wanted complexity: medium phase: 4 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

amm-simulator: the README's cargo commands and example pool.json don't run, the V2 half has no parity test against the contract, and the CLI can't emit compact output 6 days ago

enhancement help wanted complexity: medium phase: 4 Stellar Wave priority: 4

promisszn/soroban-amm

1

Rust

router: no admin rotation or upgrade, seven views never bump the TTL, routed swaps emit no event, and three docs still describe panics 6 days ago

enhancement help wanted complexity: medium phase: 3 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

governance: quorum is measured against the live LP supply while votes use the previous ledger's balances, and propose accepts parameters that can never execute 6 days ago

bug help wanted complexity: high phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

pol_vesting: schedule entries can archive before they vest, lp_token/pool are never validated, and there is no upgrade path or verified initialization 7 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

scripts/e2e: add an on-chain flow for v2_to_v3_migration (preview, migrate, rejections, top-up) 7 days ago

enhancement help wanted complexity: medium phase: 4 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

amm-sdk: decode_amm_event returns None for the AMM's real swap and flash_loan events — its tests encode the same wrong shapes 7 days ago

bug help wanted complexity: medium Stellar Wave phase: 5 priority: 2

promisszn/soroban-amm

1

Rust

scripts/e2e: add an on-chain flow for batch_auction (venues, submit/cancel, settle, expire, refunds) 7 days ago

enhancement help wanted complexity: medium phase: 4 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

v2_to_v3_migration: one instance per pool pair, a dead admin role, no pause or upgrade, and no preview of what a migration yields 7 days ago

enhancement help wanted complexity: medium phase: 3 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

scripts/e2e: add an on-chain flow for batch_router (execute/simulate/validate, atomicity, CL swap op) 7 days ago

enhancement help wanted complexity: medium phase: 4 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

scripts/e2e: add an on-chain flow for reserve_manager (floors, AMM and CL checks, batch, pause, handover) 7 days ago

enhancement help wanted complexity: medium phase: 4 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

scripts/e2e: add an on-chain flow for twal_consumer (snapshots, AMM and CL TWAL, batch reads, errors) 7 days ago

enhancement help wanted complexity: medium phase: 4 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

sdk: the TypeScript SDK is read-only — no way to build, sign, submit or confirm a swap, deposit, vote or any other write 8 days ago

enhancement help wanted complexity: high Stellar Wave phase: 5 priority: 2

promisszn/soroban-amm

1

Rust

go-sdk: ScVal discriminants for bytes, string, symbol, vec, map and address are all off by one from the Soroban XDR — reads and address arguments cannot work on-chain 8 days ago

bug help wanted complexity: high Stellar Wave phase: 5 priority: 1

promisszn/soroban-amm

1

Rust

graphql-api: TVL adds two different tokens, volume never windows to 24h, price ignores swap direction (60% false deviation) and positions are never derived 8 days ago

bug help wanted complexity: high Stellar Wave phase: 5 priority: 2

promisszn/soroban-amm

1

Rust

graphql-api: the poolEvent subscription can never fire (nothing publishes, no WebSocket server) and demo data is seeded in production 8 days ago

bug help wanted complexity: medium Stellar Wave phase: 5 priority: 2

promisszn/soroban-amm

1

Rust

graphql-api: README promises a SQLite store and cursor persistence — only an unused in-memory store exists and a restart loses everything 8 days ago

bug help wanted complexity: high Stellar Wave phase: 5 priority: 3

promisszn/soroban-amm

1

Rust

oracle_aggregator: no contract implements the quote() source interface — it cannot be fed by the protocol's own TWAP consumers 8 days ago

enhancement help wanted complexity: high phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

twap_consumer: the TWAP window is the pool's last-update interval, not [now-window, now] — idle pools return ElapsedZero and the latest price never counts 8 days ago

bug help wanted complexity: high phase: 3 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

sdk: the README documents a StakingClient and IncentiveCampaignsClient that do not exist (the latter is an empty stub); eight contracts have no client 8 days ago

bug help wanted complexity: high Stellar Wave phase: 5 priority: 3

promisszn/soroban-amm

1

Rust

scripts/e2e: add an on-chain flow for incentive_campaigns (create, claim, rate change, recovery, handover) 8 days ago

enhancement help wanted complexity: medium phase: 4 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

go-sdk: write methods sign the unsimulated envelope — no sequence number, resource fee, footprint or auth — and no real signer exists 8 days ago

bug help wanted complexity: high Stellar Wave phase: 5 priority: 1

promisszn/soroban-amm

1

Rust

go-sdk: the error table covers 15 of 21 AmmError variants (again) with no drift test, and mislabels other contracts' codes 8 days ago

bug help wanted complexity: medium Stellar Wave phase: 5 priority: 3

promisszn/soroban-amm

1

Rust

oracle_aggregator: sources are global, so every price read calls every source for every pair and a pair needs two dedicated sources 8 days ago

bug help wanted complexity: high phase: 3 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

oracle_aggregator: pause does not stop get_price_safe, stale sources can be labelled Agreed, and admin changes emit no events 8 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

twal_consumer: the AMM TWAL path uses the pool's last-update interval, so idle pools return ElapsedZero (the CL path already extrapolates) 8 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

ui-components: capital efficiency uses sqrt(Pa/Pb) instead of the sqrt-price ratio, so every multiplier is shown at about half its true value 8 days ago

bug help wanted complexity: medium Stellar Wave phase: 5 priority: 3

promisszn/soroban-amm

1

Rust

amm-fuzz: the deployed-contract suite checks three properties on swap/liquidity only — add a stateful invariant suite over every AMM entrypoint (it would have caught #1093 and #1097) 8 days ago

enhancement help wanted complexity: high phase: 4 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

amm: with a 100% fee get_amount_in returns Ok(0), so swap_exact_out hands out the pool's tokens for free 9 days ago

bug help wanted complexity: medium phase: 1 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

incentive_campaigns: every claim rewrites a growing Vec<u64> — claims get slower and eventually revert on a popular campaign 9 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

amm: add_liquidity_fot has no MINIMUM_LIQUIDITY lock — the #503 fix (22736ea9) and its tests were lost from main 9 days ago

bug help wanted complexity: medium phase: 1 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

factory: one low-fee pool makes set_treasury revert for all pools, new pools ignore the global rate, and sweep_fees can be blocked by any non-factory recipient 9 days ago

bug help wanted complexity: high phase: 3 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

governance: the admin can retroactively defeat or revive any proposal by changing quorum decay; setters are unbounded and unevented, and initialization is not verified 9 days ago

bug help wanted complexity: high phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

amm: after an emergency withdrawal, old LP tokens can drain every later deposit — TotalShares is reset but the LP supply is not 9 days ago

bug help wanted complexity: high phase: 1 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

staking: the staker registry is a Vec in instance storage — stake() cost grows 21× by 400 stakers and the pool bricks at a few thousand 9 days ago

bug help wanted complexity: high phase: 3 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

concentrated_liquidity: oracle deviation guard fails open, admin changes emit no events, and protocol fee can be set to 100% 9 days ago

bug help wanted complexity: medium phase: 2 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

concentrated_liquidity: ticks, tick bitmap, range orders and NFT indexes still live in instance storage — the pool bricks as positions accumulate 9 days ago

bug help wanted complexity: high phase: 2 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

token: Balance, Allowance and lock entries never get a TTL bump — only checkpoints do, so a dormant holder's LP tokens archive first 9 days ago

bug help wanted complexity: medium phase: 1 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

webhook-streamer: event field schemas are keyed by name only — CL swaps are mislabelled as AMM fields and AMM swaps/flash loans are unnamed 9 days ago

bug help wanted complexity: medium Stellar Wave phase: 5 priority: 2

promisszn/soroban-amm

1

Rust

graphql-api: the ingester stamps seconds and the indexer prunes in milliseconds, so every ingested event and price point is deleted on arrival 9 days ago

bug help wanted complexity: medium Stellar Wave phase: 5 priority: 1

promisszn/soroban-amm

1

Rust

webhook-streamer: the management API is still unauthenticated, lists every subscriber secret, and sends the secret itself as the auth header (#731) 9 days ago

bug help wanted complexity: high Stellar Wave phase: 5 priority: 2

promisszn/soroban-amm

1

Rust

webhook-streamer: subscriptions, dead letters and cursors are in memory and the poller cannot recover from the RPC retention window 9 days ago

bug help wanted complexity: high Stellar Wave phase: 5 priority: 3

promisszn/soroban-amm

1

Rust

pol_vesting: revoke_vesting's transfers depend on the apply ledger, so a revoke simulated in the release's ledger traps 9 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

concentrated_liquidity: LP fee growth uses a 1e6 scale, so swaps in realistic pools credit LPs zero fees 9 days ago

bug help wanted complexity: high phase: 2 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

token: every balance change rewrites the whole checkpoint list — sim/apply size mismatch fails transfers, and busy pools hit the per-tx write limit 9 days ago

bug help wanted complexity: high phase: 1 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

amm: remove_liquidity_one_sided corrupts reserves when token_out is token_b — the two withdrawn amounts are transposed 9 days ago

bug help wanted complexity: medium phase: 1 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

concentrated_liquidity: oracle history is still unbounded in instance storage and observe() returns 0 for old windows (#1040 closed, unchanged) 9 days ago

bug help wanted complexity: high phase: 2 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

amm: circuit breaker never actually pauses the pool — the trip is written then reverted by the Err it returns 9 days ago

bug help wanted complexity: high phase: 1 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

governance: delegation cycles longer than 9 are accepted and delegators deeper than 8 are silently dropped from the tally 9 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

factory: in permissionless mode anyone can squat a token pair with a 100%-fee pool — one pool per pair, any fee, no way to replace it 9 days ago

bug help wanted complexity: high phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

factory: is_cl_pool is an unbounded scan, admin handover skips TTL extension, and wasm-hash/rate-limit changes emit no events 9 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

concentrated_liquidity: tick→sqrt-price conversion goes through a 1e6-scaled price, so low-price ticks collide and drift up to 0.3% from math.rs 9 days ago

bug help wanted complexity: high phase: 2 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

concentrated_liquidity: swap_exact_out/quote_exact_out ignore the 0 price-limit sentinel and bypass the oracle index that swap uses 9 days ago

bug help wanted complexity: medium phase: 2 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

token: mint, burn, approve and lock changes emit no events, transfer is not SEP-41 shaped, and initialization is not verified 9 days ago

bug help wanted complexity: medium phase: 1 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

staking: settle_boost pays rewards while paused, three admin events skip versioning, and initialization is unverified with no token-pair validation 9 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 3

promisszn/soroban-amm

1

Rust

governance: one delegator moving a single LP unit after the snapshot makes the delegatee's vote revert 9 days ago

bug help wanted complexity: medium phase: 3 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

incentive_campaigns: a passive LP's first claim pays 0 and anyone can reprice an idle window — an honest LP got 998 instead of ~999,000 9 days ago

bug help wanted complexity: high phase: 3 Stellar Wave priority: 1

promisszn/soroban-amm

1

Rust

amm: update_fee and initialize still allow protocol_fee_bps == fee_bps — the #506 fix (6fc64226) and its tests are gone, AUDIT M-03 is open 9 days ago

bug help wanted complexity: medium phase: 1 Stellar Wave priority: 2

promisszn/soroban-amm

1

Rust

promisszn/soroban-amm

Open Issues Need Help