Smart Contract Security Audit & Lint

contract-security.yml

110 workflow runs

feat(formal-verification): add collateral conservation and backed fee accrual invariants (#458)
requires action with the application:
Smart Contract Security Audit & Lint#115:Pull request#460synchronizebyocakciomursel-pixel
ocakciomursel-pixel:feat/formal-verification-collateral-conservation-458
Oct 27, 2026-1s
fix(lending): prevent protocol fee collection from draining depositor collateral (#457)
requires action with the application:
Smart Contract Security Audit & Lint#114:Pull request#459synchronizebyocakciomursel-pixel
ocakciomursel-pixel:fix/lending-collateral-fee-guard-457
Oct 27, 2026Action required
fix(contracts): add Soroban __constructor and require_auth guards on initialize()
requires action with the application:
Smart Contract Security Audit & Lint#113:Pull request#466openedbyhuangji6693-max
huangji6693-max:fix/initialize-admin-auth-guard-352
Oct 26, 2026Action required
fix(contracts): clear multisig pause and unpause signer markers on activation
requires action with the application:
Smart Contract Security Audit & Lint#112:Pull request#465openedbyhuangji6693-max
huangji6693-max:fix/clear-multisig-pause-unpause-signers-354
Oct 26, 2026Action required
test(lending): add collateral conservation and backed fee accrual invariants (#458)
requires action with the application:
Smart Contract Security Audit & Lint#111:Pull request#464openedbyhuangji6693-max
huangji6693-max:test/collateral-conservation-fee-invariants-458
Oct 26, 2026Action required
fix(lending): prevent protocol fee collection from draining depositor collateral (#457)
requires action with the application:
Smart Contract Security Audit & Lint#110:Pull request#463openedbyhuangji6693-max
huangji6693-max:fix/prevent-fee-draining-depositor-collateral-457
Oct 26, 2026Action required
fix(default_management): enforce multi-sig authorization on trigger_insurance_payout (#353)
requires action with the application:
Smart Contract Security Audit & Lint#109:Pull request#462openedbyhuangji6693-max
huangji6693-max:fix/multisig-auth-trigger-insurance-payout-353
Oct 26, 2026Action required
feat(formal-verification): add collateral conservation and backed fee accrual invariants (#458)
requires action with the application:
Smart Contract Security Audit & Lint#108:Pull request#460openedbyocakciomursel-pixel
ocakciomursel-pixel:feat/formal-verification-collateral-conservation-458
Oct 26, 2026Action required
fix(lending): prevent protocol fee collection from draining depositor collateral (#457)
requires action with the application:
Smart Contract Security Audit & Lint#107:Pull request#459openedbyocakciomursel-pixel
ocakciomursel-pixel:fix/lending-collateral-fee-guard-457
Oct 26, 2026Action required
fix(borrower_reputation): prevent integer truncation on reputation score calculation (#420)
requires action with the application:
Smart Contract Security Audit & Lint#106:Pull request#456openedbyocakciomursel-pixel
ocakciomursel-pixel:fix/borrower-reputation-i128-truncation-420
Oct 25, 2026Action required
fix(escrow): enforce on-chain token custody in create_hold, revoke_hold and confirm_disbursement
requires action with the application:
Smart Contract Security Audit & Lint#105:Pull request#455openedbycomandanto
comandanto:fix/escrow-token-custody
Oct 25, 2026Action required
feat(usdc-pool): support partial withdrawals and cap yield rate changes
requires action with the application:
Smart Contract Security Audit & Lint#104:Pull request#454openedbycomandanto
comandanto:feat/usdc-pool-partial-withdrawals
Oct 25, 2026Action required
fix(lending): lock collateral for pending loan requests on withdrawal
requires action with the application:
Smart Contract Security Audit & Lint#103:Pull request#453openedbycomandanto
comandanto:fix/loan-collateral-locking
Oct 25, 2026Action required
fix(auto-compound-vault): mitigate share inflation and rounding exploits
requires action with the application:
Smart Contract Security Audit & Lint#102:Pull request#452openedbycomandanto
comandanto:fix/vault-share-inflation
Oct 25, 2026Action required
feat(airdrop): add admin-gated sweep_unclaimed to recover unclaimed TLEND
requires action with the application:
Smart Contract Security Audit & Lint#101:Pull request#451openedbycomandanto
comandanto:feat/airdrop-unclaimed-sweep
Oct 25, 2026Action required
fix(lending): verify vault collateral in create_loan_request
requires action with the application:
Smart Contract Security Audit & Lint#100:Pull request#450openedbycomandanto
comandanto:fix/vault-collateral-verification
Oct 25, 2026Action required
fix(lending): expose set_oracle so multisig SetOracle can target lending
requires action with the application:
Smart Contract Security Audit & Lint#99:Pull request#449openedbycomandanto
comandanto:fix/multisig-setoracle-target-method
Oct 25, 2026Action required
fix(liquidation-auction): enforce bidder payment and collateral settlement in place_bid
requires action with the application:
Smart Contract Security Audit & Lint#98:Pull request#448openedbycomandanto
comandanto:fix/liquidation-bidder-settlement
Oct 25, 2026Action required
feat(referral_rewards): add multi-sig governance and pause controls
requires action with the application:
Smart Contract Security Audit & Lint#97:Pull request#445openedbyumpireboulianne-design
umpireboulianne-design:fix/issue-425-referral-rewards-multisig-pause
Oct 24, 2026Action required
feat(governance): add voting power checkpointing and execution timelock
requires action with the application:
Smart Contract Security Audit & Lint#96:Pull request#444openedbyumpireboulianne-design
umpireboulianne-design:fix/issue-424-governance-checkpoint-timelock
Oct 24, 2026Action required
feat(lending): execute collateral seizure and transfer on loan liquidation
requires action with the application:
Smart Contract Security Audit & Lint#95:Pull request#443openedbyumpireboulianne-design
umpireboulianne-design:fix/issue-433-liquidation-collateral-seizure
Oct 24, 2026Action required
feat(lending): add reentrancy guard and deadline enforcement to flash loans
requires action with the application:
Smart Contract Security Audit & Lint#94:Pull request#437openedbyumpireboulianne-design
umpireboulianne-design:fix/issue-434-flash-loan-reentrancy-guard
Oct 24, 2026Action required
feat(tlend_token): enforce MAX_TOTAL_SUPPLY cap in TlendTokenContract::mint
requires action with the application:
Smart Contract Security Audit & Lint#93:Pull request#436openedbyumpireboulianne-design
umpireboulianne-design:fix/issue-426-tlend-max-total-supply
Oct 24, 2026Action required
chore(deps): bump soroban-sdk from 22.0.11 to 29.0.1 in /contracts
failed:
Smart Contract Security Audit & Lint#92:Pull request#409openedbydependabot[bot]Bot
dependabot/cargo/contracts/soroban-sdk-29.0.1
Oct 22, 20262m 47s
chore(deps): bump ed25519-dalek from 2.2.0 to 3.0.0 in /contracts
failed:
Smart Contract Security Audit & Lint#91:Pull request#408openedbydependabot[bot]Bot
dependabot/cargo/contracts/ed25519-dalek-3.0.0
Oct 22, 20262m 51s