use-plumbline/plumbline

Expand the corpus beyond reference contracts to a production codebase 18 days ago

help wanted area:rules difficulty:easy

0

Go

unchecked-arithmetic: a u32 accumulator reported as token arithmetic (corpus false positive) 18 days ago

help wanted area:rules difficulty:medium

use-plumbline/plumbline

0

Go

temporary-storage-for-durable-data: durable state in temporary storage 18 days ago

help wanted area:rules difficulty:easy

use-plumbline/plumbline

0

Go

storage-access-in-loop: a metered host call multiplied by the iteration count 18 days ago

help wanted area:rules difficulty:medium

use-plumbline/plumbline

0

Go

hardcoded-address-literal: a Stellar address baked into contract source 18 days ago

help wanted good first issue area:rules difficulty:easy

use-plumbline/plumbline

0

Go

missing-ttl-extension: persistent storage that is never kept alive 18 days ago

help wanted area:rules difficulty:medium

use-plumbline/plumbline

0

Go

custom-signature-payload-unbound: a hand-rolled signature check that replays across networks 18 days ago

help wanted area:rules difficulty:hard needs-maintainer-review maintainer-owned

use-plumbline/plumbline

0

Go

unauthorized-upgrade: contract WASM replaceable without authorization 18 days ago

help wanted area:rules difficulty:medium

use-plumbline/plumbline

0

Go

missing-reinit-guard: an initializer that can be called twice 18 days ago

help wanted good first issue area:rules difficulty:easy

use-plumbline/plumbline

0

Go

Baseline mode: ignore pre-existing findings 18 days ago

help wanted area:engine difficulty:medium needs-maintainer-review maintainer-owned

use-plumbline/plumbline

0

Go

SARIF output for GitHub code scanning 18 days ago

help wanted area:engine area:ci difficulty:medium maintainer-owned

use-plumbline/plumbline

0

Go

panic-in-contract: follow calls into same-file helpers 18 days ago

help wanted area:rules area:engine difficulty:hard needs-maintainer-review maintainer-owned

use-plumbline/plumbline

0

Go

contractmeta-missing: a deployed contract that cannot say what it is about 1 month ago

help wanted good first issue area:rules difficulty:easy

use-plumbline/plumbline

0

Go

missing-event-on-state-change: state changes with nothing emitted for off-chain observers about 1 month ago

help wanted area:rules difficulty:medium

use-plumbline/plumbline

0

Go

Add a second sample contract to testdata (token or escrow) about 2 months ago

help wanted area:rules area:ci difficulty:easy

use-plumbline/plumbline

0

Go

Per-rule documentation pages under docs/rules/ about 2 months ago

help wanted good first issue area:docs difficulty:easy

use-plumbline/plumbline

0

Go

Config file: .plumbline.toml for per-rule enable/disable and severity about 2 months ago

help wanted area:engine difficulty:medium needs-maintainer-review

use-plumbline/plumbline

0

Go

require-auth-in-check-auth: authorizing inside the function that evaluates authorization about 2 months ago

help wanted area:rules difficulty:medium

use-plumbline/plumbline

0

Go

oversized-symbol: symbol literal exceeding its length or character limit about 2 months ago

help wanted good first issue area:rules difficulty:easy

use-plumbline/plumbline

0

Go

unchecked-shift: shift amount that can exceed the operand width about 2 months ago

help wanted area:rules difficulty:medium

use-plumbline/plumbline

0

Go

division-by-zero: unguarded division in a contract function about 2 months ago

help wanted good first issue area:rules difficulty:easy

use-plumbline/plumbline

0

Go

arbitrary-cross-contract-call: calling a contract address chosen by the caller about 2 months ago

help wanted area:rules difficulty:medium

use-plumbline/plumbline

0

Go

unbounded-iteration: looping over a stored collection with no length bound about 2 months ago

help wanted area:rules difficulty:medium

use-plumbline/plumbline

0

Go

instance-storage-for-unbounded-data: per-user data in instance storage about 2 months ago

help wanted area:rules difficulty:medium

use-plumbline/plumbline

0

Go

unvalidated-amount: i128 amount used without a sign check about 2 months ago

help wanted good first issue area:rules difficulty:easy

use-plumbline/plumbline

0

Go

missing-nested-auth: spending an address's authority without re-authorizing it about 2 months ago

help wanted area:rules difficulty:medium

use-plumbline/plumbline

0

Go

auth-on-caller-supplied-address: authorizing a parameter instead of the stored authority about 2 months ago

help wanted area:rules difficulty:medium

use-plumbline/plumbline

0

Go

Open Issues Need Help