All issues

Search results

[CI] 14 open PRs are 5 commits behind main and all show the same phantom test failure

Status: Open.

#393 In dcccrypto/percolator-keeper;

· dcccrypto opened on Jul 22, 2026

[CI] Nightly SDK publish smoke cannot pass: tests target v17 SDK 3.0.0, which was never published (latest npm is 2.0.9)

Status: Open.

#389 In dcccrypto/percolator-keeper;

· dcccrypto opened on Jul 20, 2026

[SEQUENCING] Do not drop close_q/fee_bps from keeper until percolator-prog upstream #206 is deployed to mainnet

Status: Open.

#387 In dcccrypto/percolator-keeper;

· dcccrypto opened on Jul 19, 2026

CI: docker job only runs on main, so image-build breakage is invisible at PR time

Status: Open.

#384 In dcccrypto/percolator-keeper;

· dcccrypto opened on Jul 18, 2026

v17 liquidation pre-submit re-verification fails open (bypasses oracle-drift guard)

Status: Open.

#373 In dcccrypto/percolator-keeper;

· v1ktorrr0x opened on Jul 2, 2026

Medium: bigint-buffer buffer-overflow CVE (GHSA-3gc7-fjrx-p6mg) has no patched version available — reachable on account-decoding path

Status: Open.

#372 In dcccrypto/percolator-keeper;

· Morenikeoa opened on Jun 27, 2026

[HIGH] oracle.ts: DEVIATION_ACCEPT_AFTER=5 count-only gate allows ~25s coordinated dual-source manipulation to push >30% deviated price

Status: Open.

#362 In dcccrypto/percolator-keeper;

· Ayomisco opened on Jun 26, 2026

[HIGH] liquidation.ts: LaserStream event burst exhausts MAX_LIQ_PER_OWNER_PER_CYCLE before polling scan — underwater positions skip liquidation

Status: Open.

#360 In dcccrypto/percolator-keeper;

· Ayomisco opened on Jun 26, 2026

[HIGH] index.ts: /health, /pause-status, /shadow/report fail OPEN when KEEPER_HEALTH_BIND_ADDR is remote and KEEPER_REGISTER_SECRET is unset

Status: Open.

#358 In dcccrypto/percolator-keeper;

· Ayomisco opened on Jun 26, 2026

[HIGH] crank.ts: Supabase mainnet_ca injected into fraud-detector price lookup without on-chain SPL Token ownership validation

Status: Open.

#356 In dcccrypto/percolator-keeper;

· Ayomisco opened on Jun 26, 2026

[CRITICAL] CRANK_KEYPAIR parsed into 4 separate heap allocations with no secret-zeroing

Status: Open.

#354 In dcccrypto/percolator-keeper;

· Ayomisco opened on Jun 26, 2026

[CRITICAL] liquidation.ts: silent catch{} in v17 pre-submit recheck bypasses oracle drift guard on RPC failure

Status: Open.

#352 In dcccrypto/percolator-keeper;

· Ayomisco opened on Jun 26, 2026