Parashield-Protocol

Parashield-Protocol/parashield-backend

NestJS API server for Parashield — oracle ingestion, policy management, claims processing

1 stars 34 forks 1 watchers TypeScript
View on GitHub
8 Open Issues Need Help Last updated: Jun 30, 2026

Open Issues Need Help

View All on GitHub
Policies remain `ACTIVE` in the DB for up to an hour (or longer) after their real coverage period ends 10 days ago
bug help wanted Stellar Wave
Parashield-Protocol/parashield-backend
1

NestJS API server for Parashield — oracle ingestion, policy management, claims processing

TypeScript
Policy oracleKey is never validated against its own coverage window — adverse-selection exploit 10 days ago
bug help wanted Stellar Wave
Parashield-Protocol/parashield-backend
1

NestJS API server for Parashield — oracle ingestion, policy management, claims processing

TypeScript
`autoProcess()` has no duplicate-claim guard — double payout on concurrent invocation 12 days ago
bug help wanted Stellar Wave
Parashield-Protocol/parashield-backend
1

NestJS API server for Parashield — oracle ingestion, policy management, claims processing

TypeScript
Policy status transition to `CLAIMED` is not atomic — TOCTOU window across the whole payout flow 12 days ago
bug help wanted Stellar Wave
Parashield-Protocol/parashield-backend
1

NestJS API server for Parashield — oracle ingestion, policy management, claims processing

TypeScript
Stellar payout failure is swallowed — claim marked `PAID` even when nothing was paid 12 days ago
bug help wanted Stellar Wave
Parashield-Protocol/parashield-backend
1

NestJS API server for Parashield — oracle ingestion, policy management, claims processing

TypeScript
Successful on-chain payout followed by a failed DB write risks a second on-chain invoke on retry 12 days ago
bug help wanted Stellar Wave
Parashield-Protocol/parashield-backend
1

NestJS API server for Parashield — oracle ingestion, policy management, claims processing

TypeScript
Confirmed policy purchase persists client-supplied coverage/duration/oracleKey without checking them against the actual on-chain transaction arguments 12 days ago
bug help wanted Stellar Wave
Parashield-Protocol/parashield-backend
1

NestJS API server for Parashield — oracle ingestion, policy management, claims processing

TypeScript
Confidence-0 rainfall readings are submitted on-chain despite being explicitly distrusted for DB persistence 12 days ago
bug help wanted Stellar Wave
Parashield-Protocol/parashield-backend
1

NestJS API server for Parashield — oracle ingestion, policy management, claims processing

TypeScript