Skip to content

fix: add security validations for claims processing and policy creation - #699

Merged
nonsobethel0-dev merged 1 commit into
Parashield-Protocol:mainfrom
Priscy-bells:fix/security-validation-issues
Oct 19, 2026
Merged

nonsobethel0-dev merged 1 commit into
Parashield-Protocol:mainfrom
Priscy-bells:fix/security-validation-issues

Conversation

@Priscy-bells

Copy link
Copy Markdown
Contributor

close #612
close #613
close #614
close #615

- ClaimsProcessor.process_claim: Verify claim status is Pending before processing to prevent reprocessing already settled claims
- OracleVerifier.set_min_oracle_count: Enforce min_count >= 1 to prevent claims without oracle verification
- PolicyEngine.buy_policy: Validate start_time < end_time to reject invalid policies
- ClaimsProcessor.dispute_claim: Restrict disputes to claimant or policy holder only

These fixes address critical security issues that could allow:
- Double-payouts from reprocessing settled claims
- Unverified claims bypassing oracle checks
- Invalid policies with inverted time ranges
- Unauthorized dispute initiation
@drips-wave

drips-wave Bot commented Oct 19, 2026

Copy link
Copy Markdown

@Priscy-bells Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@nonsobethel0-dev
nonsobethel0-dev merged commit 0b660d7 into Parashield-Protocol:main Oct 19, 2026
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

2 participants