Issues

• Bug: Private Vulnerability Reporting is still not enabled: the only reporting channel in SECURITY.md does not work (follow-up to #897 and #1070)

  bug
  Neurowealth/NeuroWealth-Smartcontract#1082 · Filter by author juantzy7 opened on Nov 5, 2026
  3

• 🚨 Devnet post-upgrade smoke test failure

  bugci
  Neurowealth/NeuroWealth-Smartcontract#1079 · Filter by author github-actions opened on Oct 26, 2026
  18

• Scheduled cargo-deny audit is failing (dependency advisory drift)

  Neurowealth/NeuroWealth-Smartcontract#1078 · Filter by author github-actions opened on Oct 25, 2026
  5

• Bug: Contact email not working

  bugStellar Wave
  Neurowealth/NeuroWealth-Smartcontract#1073 · Filter by author crvenimarlboro opened on Oct 21, 2026
  5

  

• test(frontend): database.test.ts references undeclared fromMock and un-imported afterEach — the whole suite fails

  Neurowealth/NeuroWealth-Smartcontract#1058 · Filter by author robertocarlous opened on Oct 19, 2026
  2

• bug(frontend): database.ts calls getBrowserTestHarness() that is never imported — breaks next build and throws at runtime

  Neurowealth/NeuroWealth-Smartcontract#1057 · Filter by author robertocarlous opened on Oct 19, 2026
  2

• bug(whatsapp): delivery-status ledger lets a late "failed" overwrite "delivered" and drops concurrent first callbacks

  Neurowealth/NeuroWealth-Smartcontract#1056 · Filter by author robertocarlous opened on Oct 19, 2026
  2

• chore(whatsapp): inbound-webhook and delivery ledgers are never purged

  Neurowealth/NeuroWealth-Smartcontract#1055 · Filter by author robertocarlous opened on Oct 19, 2026
  2

• chore(whatsapp): envGuard doesn't require the Twilio SMS variables the OTP flow needs at runtime

  Neurowealth/NeuroWealth-Smartcontract#1054 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• test(whatsapp): webhook suite still asserts the OTP is echoed in the chat reply and never stubs the SMS client

  Neurowealth/NeuroWealth-Smartcontract#1053 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• bug(whatsapp): vaultRouter calls a non-existent rpc.Server.simulateContractInvocation — service does not typecheck, build, or run

  Neurowealth/NeuroWealth-Smartcontract#1052 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• chore(whatsapp): duplicate "test" script key silently drops six test suites from npm test

  Neurowealth/NeuroWealth-Smartcontract#1050 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• test(whatsapp): wallet test files never await async calls, adding ~32 type errors to the build

  Neurowealth/NeuroWealth-Smartcontract#1051 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• security(whatsapp): OTP codes and raw phone numbers are written to logs

  Neurowealth/NeuroWealth-Smartcontract#1048 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• bug(whatsapp): pg Pool has no "error" listener — an idle-client error crashes the process

  Neurowealth/NeuroWealth-Smartcontract#1049 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• enhancement(contract): update_total_assets emits one YieldAttributedEvent per holder with no cap

  Neurowealth/NeuroWealth-Smartcontract#1044 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• security(contract): touch_user_ttl is unauthenticated and writes an attacker-chosen key into instance storage

  Neurowealth/NeuroWealth-Smartcontract#1041 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• bug(contract): rebalance min_out guard contains a dead condition and preview_* "views" write storage and can panic

  Neurowealth/NeuroWealth-Smartcontract#1038 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• bug(contract): security-relevant persistent keys are never TTL-extended and misbehave on expiry

  Neurowealth/NeuroWealth-Smartcontract#1045 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• docs(contract): INSURANCE.md documents an insurance fund that does not exist

  Neurowealth/NeuroWealth-Smartcontract#1043 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• security(contract): deposit_asset bypasses the vault-wide TVL cap and all global deposit limits

  Neurowealth/NeuroWealth-Smartcontract#1047 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• bug(contract): update_total_assets ignores deployed funds when CurrentProtocol is "multi", so full-value reports always revert

  Neurowealth/NeuroWealth-Smartcontract#1046 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• test(contract): the yield-attribution feature has zero test coverage

  Neurowealth/NeuroWealth-Smartcontract#1042 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• security(contract): deposit_asset/withdraw_asset mix foreign-asset raw amounts into TotalAssets that prices USDC shares

  Neurowealth/NeuroWealth-Smartcontract#1040 · Filter by author robertocarlous opened on Oct 19, 2026
  1

• bug(contract): protocol adapter/whitelist feature is fully scaffolded but never implemented

  Neurowealth/NeuroWealth-Smartcontract#1037 · Filter by author robertocarlous opened on Oct 19, 2026
  1