Search results

[INFO] Dead field last_vault_snapshot + stale AccrueFees docstring (snapshot-delta formula not implemented)

Status: Open.

#255 In dcccrypto/percolator-stake;

· v1ktorrr0x opened on Jun 25, 2026

[LOW] RecoverFlushedInsurance does not verify market == pool.slab (missing fail-fast; wrapper blocks exploit)

Status: Open.

#254 In dcccrypto/percolator-stake;

· v1ktorrr0x opened on Jun 25, 2026

[LOW] ReturnInsurance (tag 10) can strand originally-flushed tokens by zeroing the RecoverFlushedInsurance (tag 23) cap

Status: Open.

#253 In dcccrypto/percolator-stake;

· v1ktorrr0x opened on Jun 25, 2026

[LOW] error_hint() missing hints for #242 timelock error codes 25/26/27

Status: Open.

#252 In dcccrypto/percolator-stake;

· v1ktorrr0x opened on Jun 25, 2026

[LOW] process_burn_asset_admin bypasses the #199 checked-bytemuck helper (panicking from_bytes_mut)

Status: Open.

#251 In dcccrypto/percolator-stake;

· v1ktorrr0x opened on Jun 25, 2026

[HIGH] StakePool._reserved byte collision: #242 cooldown-timelock fields alias PERC-313 HWM fields

Status: Open.

#250 In dcccrypto/percolator-stake;

· v1ktorrr0x opened on Jun 25, 2026

[CRIT] Program upgrade authority undocumented — single EOA key compromise allows full TVL drain

Status: Open.

#240 In dcccrypto/percolator-stake;

· Ayomisco opened on Jun 23, 2026

DEPLOY BLOCKER (v17): wrapper requires a 128KB heap frame on EVERY tx — no TS client requests one (surfaced via stake e2e)

Status: Open.

#176 In dcccrypto/percolator-stake;

· dcccrypto opened on Jun 19, 2026