All issues

Add input sanitization library for all user-facing string parameters preventing injection and encoding attacks

#161

· ALLEN-AYODEJI opened

on Jul 25, 2026

Implement rate limiting for outbound RPC calls in the CLI to prevent unintentional RPC provider abuse

#160

· ALLEN-AYODEJI opened

on Jul 25, 2026

Add cargo-audit scheduled workflow for continuous dependency vulnerability monitoring

#159

· ALLEN-AYODEJI opened

on Jul 25, 2026

Add SAST scanning with Semgrep to CI for detecting common smart contract vulnerability patterns

#158

· ALLEN-AYODEJI opened

on Jul 25, 2026

No secure key management: CLI source key provided in plaintext env var with no hardware wallet or keystore support

#157

· ALLEN-AYODEJI opened

on Jul 25, 2026

No RPC URL validation: CLI accepts any string as --rpc-url with no scheme or format verification

#156

· ALLEN-AYODEJI opened

on Jul 25, 2026

No input size limits: CLI accepts arbitrarily long arguments risking oversized payload RPC DoS

#155

· ALLEN-AYODEJI opened

on Jul 25, 2026

No explicit panic boundaries: contract functions without clear panic-safe error propagation risking ledger rollback

#154

· ALLEN-AYODEJI opened

on Jul 25, 2026

Add CLI integration tests using a mock stellar binary to test argument parsing, error handling, and output formatting

#152

· ALLEN-AYODEJI opened

on Jul 25, 2026

No Cargo deny or audit configuration for dependency vulnerability scanning leaving supply chain unmonitored

#153

· ALLEN-AYODEJI opened

on Jul 25, 2026

Add mutation testing for contract validation logic to quantify test suite effectiveness

#151

· ALLEN-AYODEJI opened

on Jul 25, 2026

Add gas cost benchmarks for all contract entrypoints to track Soroban fee regression

#150

· ALLEN-AYODEJI opened

on Jul 25, 2026