MergeFi

MergeFi/contracts

https://merge-fi-contracts.vercel.app/

0 stars 20 forks 0 watchers Rust
View on GitHub Website
100 Open Issues Need Help Last updated: Aug 19, 2026

Open Issues Need Help

View All on GitHub
Cargo.lock is stale — cargo update resolves 2 of 3 cargo-deny findings with zero manifest changes 4 days ago
good first issue security
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
Workspace Cargo.toml has no repository/description/homepage metadata 4 days ago
documentation good first issue
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::deallocate() rejecting a never-allocated issue_id has no test 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
mergefi_common::compute_split's empty-recipients rejection path has no test anywhere, direct or indirect 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
maintenance-pool::sweep has no test for a nonexistent pool_id 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
maintenance-pool::reclaim_deposit has no test at the exact INACTIVITY_WINDOW boundary 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::cancel_milestone_after_deadline rejecting a call before deadline+grace period has no test 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::initialize() accepting fee_bps exactly at the 10000 boundary has no test 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::initialize() rejecting treasury == contract address has no test 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::allocate() with amount exactly equal to remaining_budget has no test 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
README.md has three duplicate, identical "## Recent Changes" sections 5 days ago
documentation good first issue
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
maintenance-pool::initialize() accepting fee_bps exactly at the 10000 boundary has no test 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
escrow::set_fee_bps has zero test coverage 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::set_fee_bps has zero test coverage 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
escrow::upgrade has zero test coverage 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::upgrade has zero test coverage 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
escrow::set_admin has zero test coverage 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::set_admin has zero test coverage 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::set_oracle has zero test coverage 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::set_treasury has zero test coverage 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
escrow::initialize() rejecting treasury == contract address has no test 5 days ago
good first issue testing
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
No end-to-end example script demonstrating a full fund->release integration flow 25 days ago
documentation enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
CI never uploads built .wasm artifacts for inspection or comparison 25 days ago
bug enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
scripts/invoke.mjs has the same TRY_AGAIN_LATER/DUPLICATE gap as deploy.mjs's submitAndWait 25 days ago
bug help wanted very hard architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
scripts/deploy.mjs's submitAndWait doesn't handle TRY_AGAIN_LATER/DUPLICATE sendTransaction statuses 25 days ago
bug help wanted very hard architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones: allocate() on an already-closed milestone (MilestoneClosed) has no test 25 days ago
enhancement good first issue help wanted testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones: cancel_milestone rejecting a double-cancel (MilestoneClosed) has no test 25 days ago
enhancement good first issue help wanted testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
Workspace Cargo.toml has no rust-version (MSRV) field 25 days ago
documentation enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
README's Stellar Expert link only covers the escrow contract 25 days ago
documentation enhancement good first issue help wanted Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
escrow::Contribution has no timestamp field, unlike maintenance-pool::Deposit 25 days ago
enhancement help wanted very hard architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::Contribution has no timestamp field, same gap as escrow's 25 days ago
enhancement help wanted very hard architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
Cargo.toml's [profile.release-with-logs] is defined but never referenced anywhere 25 days ago
bug documentation help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::refund_remaining_budget's dust distribution is only tested at n=3 contributors, never at the MAX_SPONSORS=20 boundary 25 days ago
bug help wanted very hard testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
docs/access-control-audit.md's refund "(at/after deadline)" row is stale — doesn't reflect the GRACE_PERIOD fix (#49) 25 days ago
bug documentation help wanted spike Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
escrow::contribute() rejecting a call after the escrow has been refunded (AlreadyRefunded) has no test 25 days ago
bug good first issue help wanted testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
CI never runs cargo doc to catch broken intra-doc links or doc-comment issues 25 days ago
documentation enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
package.json has no engines field pinning a minimum Node version 25 days ago
bug enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
package.json has no license field 25 days ago
bug documentation good first issue help wanted Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
Treasury/FeeBps instance-storage reads are triplicated boilerplate across all three contracts, unlike Admin 25 days ago
enhancement help wanted very hard architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
No .editorconfig for the repo's non-Rust files 25 days ago
documentation enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
MAX_SPONSORS and BPS_DENOMINATOR are independently redeclared per-contract instead of centralized in mergefi-common 25 days ago
enhancement good first issue help wanted architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
Makefile's deploy-* targets never call initialize, with no documented next step 26 days ago
bug documentation help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
scripts/deploy.mjs generates the contract-creation salt via Math.random() instead of a CSPRNG 26 days ago
enhancement help wanted very hard security Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
docs/access-control-audit.md's per-function tables predate contribute/extend_deadline/keep_alive/get_contribution 26 days ago
bug documentation help wanted spike Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
escrow's module-level doc comment still says "refunds them back to the sponsor" (singular), stale since crowdfunding landed 26 days ago
bug documentation good first issue help wanted Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
scripts/invoke.mjs cannot encode a Vec<(Address,u32)> argument — cannot invoke release/release_issue at all 26 days ago
bug documentation help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
All three initialize() functions are byte-identical and untouched by #60's dedup effort 26 days ago
enhancement help wanted very hard architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones has no batch/paginated way to enumerate all contributions for a milestone_id 26 days ago
enhancement help wanted very hard architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
#55's O(n log n) heapsort helpers are also duplicated verbatim between escrow and milestones, expanding #16's scope 26 days ago
help wanted very hard performance architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
escrow has no batch/paginated way to enumerate all contributions for an issue_id 26 days ago
bug enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
Add an optional funding-target/goal amount to escrow, now that crowdfunding exists 26 days ago
bug enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::refund_remaining_budget still uses the O(n²) dust-distribution scan that compute_split moved away from in #55 26 days ago
help wanted very hard performance architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
escrow::contribute lets a single sponsor exhaust MAX_SPONSORS via repeated self-contributions 26 days ago
bug enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
No code coverage measurement reported in CI 26 days ago
bug help wanted spike testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::contribute has the same MAX_SPONSORS-exhaustion-by-one-address gap as escrow::contribute 26 days ago
bug help wanted very hard security Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
CI pins the Rust toolchain to the floating stable tag rather than a fixed version 26 days ago
bug enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
CI's cargo commands don't pass --locked, so a drifted Cargo.lock wouldn't be caught 26 days ago
bug enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
CI doesn't measure or enforce a WASM binary size budget 26 days ago
bug help wanted spike performance Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
No Dependabot/Renovate config to keep soroban-sdk and @stellar/stellar-sdk current 26 days ago
enhancement help wanted very hard security Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
No published Soroban contract spec / generated TypeScript bindings for integrators 26 days ago
bug enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
CI has no dependency vulnerability scanning (cargo-audit / cargo-deny) 26 days ago
bug help wanted spike security Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
No on-chain fee-accounting field for auditability ahead of event emission landing 27 days ago
enhancement help wanted spike architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
scripts/invoke.mjs doesn't decode Soroban contract error codes back into their named Error variant 27 days ago
documentation enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
No CODEOWNERS file for reviewer auto-assignment 27 days ago
documentation enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
maintenance-pool has no MAX_DEPOSITS bound on deposit_count, unlike MAX_SPONSORS in escrow/milestones 27 days ago
bug help wanted very hard architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
Makefile's stellar contract optimize step silently swallows real failures via || true 27 days ago
bug help wanted very hard architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
MAX_SPONSORS (20) is a hardcoded constant with no per-deployment configurability 27 days ago
bug enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
scripts/deploy.mjs hardcodes the testnet RPC URL and network passphrase 27 days ago
documentation enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
No LICENSE file despite every crate declaring license = "Apache-2.0" 27 days ago
documentation enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
scripts/deploy.mjs has zero automated test coverage 27 days ago
documentation help wanted very hard testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
scripts/invoke.mjs has zero automated test coverage 27 days ago
enhancement help wanted very hard testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
scripts/deploy.mjs accepts the signer's secret key as a plain CLI argument 27 days ago
documentation good first issue help wanted security Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
scripts/invoke.mjs accepts the signer's secret key as a plain CLI argument 27 days ago
documentation help wanted very hard security Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
No CHANGELOG.md tracking behavior changes across already-landed fixes 27 days ago
documentation enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
No rust-toolchain.toml pinning the Rust version README cites 27 days ago
documentation enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
No GitHub Issue templates 27 days ago
documentation enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
mergefi_common::extend_ttl's threshold/extend-to constants (100_000, 500_000) have no derivation comment 27 days ago
bug documentation good first issue help wanted Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
No CONTRIBUTING.md documenting build/test/PR conventions 27 days ago
documentation help wanted very hard testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::Milestone.sponsor doc comment claims backward-compat with a single-sponsor API version that never existed 27 days ago
bug documentation help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
README.md's "54/54 tests pass (28 escrow, 19 milestones, 7 maintenance-pool)" count is stale 27 days ago
bug documentation good first issue help wanted Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
README.md's escrow release: description still describes the old last-recipient-absorbs-remainder split algorithm 27 days ago
bug documentation good first issue help wanted Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
escrow::extend_deadline's contributor-lookup loop has the same unwrap-on-archived-record panic risk as refund() 27 days ago
bug help wanted very hard architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
Public Error enums in all three contracts aren't marked #[non_exhaustive] 27 days ago
bug help wanted very hard architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones: no test exercising fee_bps = 0 (zero-fee full payout) 27 days ago
enhancement help wanted very hard testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones: initialize() rejecting fee_bps > 10000 (InvalidFee) has no test 27 days ago
enhancement good first issue help wanted testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
maintenance-pool: get_pool/withdraw on a nonexistent pool_id (PoolNotFound) has no test 27 days ago
bug good first issue help wanted testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
Planned event emission (#12) should explicitly cover contribute/extend_deadline/keep_alive/initialize, not just fund/release/refund 27 days ago
documentation enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::refund_remaining_budget has the same unwrap-on-archived-Contribution-record panic risk as escrow's refund() 27 days ago
bug help wanted very hard security Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::Contribution records are never TTL-refreshed after creation 27 days ago
bug help wanted very hard architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones and maintenance-pool have no keep_alive-equivalent permissionless TTL-refresh entrypoint 27 days ago
documentation help wanted very hard architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::get_contribution returns MilestoneNotFound for a missing contribution index, not just a missing milestone 27 days ago
bug enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
maintenance-pool's test suite is dramatically thinner than escrow's and milestones' — audit for missing scenarios 27 days ago
bug help wanted spike testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
milestones::create_milestone reuses Error::IssueAlreadyAllocated to mean "this milestone_id already exists" 27 days ago
bug help wanted very hard architecture Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
escrow::get_contribution returns EscrowNotFound for a missing contribution index, not just a missing escrow 28 days ago
bug enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
README.md's deployed Stellar testnet contract IDs predate several landed fixes (#55, #56, #57, #58) 28 days ago
bug documentation good first issue help wanted Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
maintenance-pool: deposit()/withdraw() rejecting a non-positive amount (InvalidAmount) has no test 28 days ago
enhancement good first issue help wanted testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
maintenance-pool: no test exercising fee_bps = 0 (zero-fee full payout) 28 days ago
enhancement help wanted very hard testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
maintenance-pool: initialize() rejecting a double-init (AlreadyInitialized) has no test 28 days ago
enhancement good first issue help wanted testing Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
docs/ has no index linking the four design documents together 28 days ago
documentation enhancement good first issue help wanted Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust
scripts/invoke.mjs hardcodes the testnet RPC URL and network passphrase 28 days ago
documentation enhancement help wanted very hard Stellar Wave
MergeFi/contracts
0

https://merge-fi-contracts.vercel.app/

Rust