Search results

Critical Vulnerability — Reporting Instructions

Status: Open.

#55 In EquipChain/EquipChain-contracts;

· amitbhakar opened on Aug 1, 2026

MEDIUM: resume_continuous_flow missing caller authentication — unauthorized flow rate changes

Status: Open.

#51 In EquipChain/EquipChain-contracts;

· leanworld7-netizen opened on Aug 1, 2026

MEDIUM: manual_extend_ttl missing caller authentication — maintenance fund drain

Status: Open.

#50 In EquipChain/EquipChain-contracts;

· leanworld7-netizen opened on Aug 1, 2026

HIGH: withdraw_continuous missing caller authentication — anyone can drain stream balances

Status: Open.

#49 In EquipChain/EquipChain-contracts;

· leanworld7-netizen opened on Aug 1, 2026

MEDIUM: apply_liveness_slash missing caller authentication — griefing attack on stream buffers

Status: Open.

#48 In EquipChain/EquipChain-contracts;

· leanworld7-netizen opened on Aug 1, 2026

CRITICAL: pause_continuous_flow and update_continuous_flow_rate missing user authentication

Status: Open.

#47 In EquipChain/EquipChain-contracts;

· leanworld7-netizen opened on Aug 1, 2026

CRITICAL: add_continuous_balance zero auth - anyone can inflate any payment stream balance

Status: Open.

#45 In EquipChain/EquipChain-contracts;

· leanworld7-netizen opened on Aug 1, 2026

Security: register_with_referral inflates meter.balance without token deposit

Status: Open.

#44 In EquipChain/EquipChain-contracts;

· leanworld7-netizen opened on Aug 1, 2026

Critical: accrue_postpaid_debt has no access control - anyone can force-slash any user's collateral

Status: Open.

#40 In EquipChain/EquipChain-contracts;

· leanworld7-netizen opened on Jul 31, 2026

Critical: accrue_postpaid_debt has no access control - anyone can force-slash any user's collateral

Status: Open.

#39 In EquipChain/EquipChain-contracts;

· leanworld7-netizen opened on Jul 31, 2026

Critical: unauthenticated redirection of all settlement payouts in utility_contracts (PoC included)

Status: Open.

#38 In EquipChain/EquipChain-contracts;

· amitbhakar opened on Jul 30, 2026

[Performance] Establish Gas Benchmark Suite with CI Regression Tracking and Storage Layout Optimization

GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSS

Maybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox reward

Official Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26

Status: Open.

#30 In EquipChain/EquipChain-contracts;

· KarenZita01 opened on Jun 11, 2026