lumensLabs/TrustAnchor

[Backend] GET /api/score/:userId performs an unauthenticated write-on-read INSERT with no conflict guard, mutating the scores table on every read 6 days ago

bug help wanted security backend database reliability Maybe Rewarded GrantFox OSS Official Campaign

1

Credit building through remittance history on Stellar

TypeScript

[Backend] Two competing identity tables (users, user_profiles) with no referential integrity from scores/loan_histories, and a down migration that drops the shared pgcrypto extension 7 days ago

bug help wanted backend database architecture Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Backend] Auth register/login use an in-memory user map with a restart-resetting counter as the JWT subject, so identities are ephemeral and token subjects collide across restarts 8 days ago

bug help wanted security backend architecture Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Backend] Error responses default to leaking stack traces because NODE_ENV is unset, and /health returns raw database driver error strings 8 days ago

bug help wanted security observability backend Maybe Rewarded GrantFox OSS Official Campaign Official Campaign | FWC26

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Infra] CI provisions no Postgres and never runs migrations; backend tests execute against a DummyPool, so every SQL path and migration is unverified 8 days ago

enhancement help wanted testing devops database Maybe Rewarded GrantFox OSS Official Campaign Official Campaign | FWC26

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Cross-Layer] Loan events omit loan_id and diverge from the event set the backend indexer expects, preventing per-loan reconstruction 9 days ago

bug help wanted contracts observability backend indexer Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Backend] Backend runs two divergent pg pools; /health probes a different pool than requests use, and an idle-client error triggers process.exit(-1) 9 days ago

bug help wanted backend database architecture reliability Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Contracts] calculate_interest silently returns zero on multiplication overflow and truncates fractional accrual with no rounding policy 9 days ago

bug help wanted contracts math Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Contracts] default_loan liquidates collateral without verifying the loan term has elapsed 9 days ago

bug help wanted contracts security Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Cross-Layer] repay takes a u32 loan id while every other entrypoint uses u64, and its zero-id fallback repays an arbitrary active loan 9 days ago

bug help wanted contracts backend frontend Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Cross-Layer] get_loan returns a stale stored outstanding field that diverges from the live get_outstanding_balance value 9 days ago

bug help wanted contracts backend frontend Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Cross-Layer] Interest and penalty accrue on the original principal for the full elapsed term and repaid principal is resurrected on recompute 9 days ago

bug help wanted contracts math backend Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Contracts] lending_pool withdraw transfers tokens before updating stored balance (CEI violation) and tracks no pool-level solvency about 1 month ago

bug help wanted critical Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Backend] Helmet is not applied even though existing config references it; security headers are missing about 1 month ago

enhancement help wanted Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

Implement Automated Health Check Endpoint about 1 month ago

good first issue backend Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Contracts] No persistent storage entries are TTL-extended, so deposits and NFT scores expire and become unrecoverable about 1 month ago

bug help wanted critical Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Testing] remittance_nft has no test for double-mint, missing-NFT update, or unauthorized minter paths about 1 month ago

enhancement good first issue help wanted Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

Setup Initial Express Project Structure & Linting about 1 month ago

good first issue backend setup Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Backend] CORS allows requests with no Origin while credentials are enabled, weakening the allowlist about 1 month ago

bug help wanted Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Backend] .env.example omits INTERNAL_API_KEY, PORT and NODE_ENV that the code reads about 1 month ago

documentation good first issue Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

[Frontend] apiClient 401 cleanup leaves wallet_connector_id inconsistent with the rest of the app storage keys about 1 month ago

bug good first issue Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

Add License File (ISC/MIT) about 1 month ago

good first issue legal Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

Write Pull Request Template about 1 month ago

documentation good first issue community Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

Implement Dark Mode Toggle about 1 month ago

enhancement good first issue frontend Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

Configure CORS and Helmet for Security about 1 month ago

good first issue security backend Maybe Rewarded GrantFox OSS Official Campaign

lumensLabs/TrustAnchor

1

Credit building through remittance history on Stellar

TypeScript

Open Issues Need Help