|
About the Submitted category
|
|
0
|
1
|
October 11, 2026
|
|
[pallets/weaver] Reorg re-confirmation double mint: claim keys bind submitted proof bytes, not canonical txid (latent; currently unreachable)
|
|
2
|
9
|
October 13, 2026
|
|
[ghost-extension-wallet] Sign-request popup renders blank on undecodable calldata; no error boundary
|
|
2
|
6
|
October 13, 2026
|
|
[ghost-dao-contracts] External-deposit lock bypassed by unstake/wrap/unwrap (variant of daffh #135)
|
|
2
|
6
|
October 13, 2026
|
|
[High] Treasury: bond payments never raise totalReserves → deterministic bond-market halt
|
|
4
|
30
|
October 13, 2026
|
|
GHOST-E02 — Third-party dust stake can extend an existing user's warmup expiry
|
|
8
|
38
|
October 13, 2026
|
|
Gatekeeper deployer can permanently replace the aggregated bridge key with no signature, vote or delay
|
|
6
|
17
|
October 12, 2026
|
|
[H3] Staking.recall bounty leg burns stakers' pooled FTSO — staker insolvency + bridge-out DoS
|
|
8
|
27
|
October 12, 2026
|
|
DKG permanently stuck for validator sets outside {4,5,6}: wrong coefficient-count check in register_round1_package
|
|
4
|
25
|
October 12, 2026
|
|
[ghost-eye] Validator commission input unbounded: typo of 429.5+ saturates to u32::MAX and signs with one Enter
|
|
1
|
5
|
October 11, 2026
|
|
[ghost-eye] Single D keypress irreversibly deletes a wallet seed, no confirmation, no backup
|
|
1
|
6
|
October 11, 2026
|
|
[ghost-eye] Malformed RPC responses panic the app; crash loop on restart via the per-tick block-range fetch
|
|
1
|
4
|
October 11, 2026
|
|
[pallets/weaver] Off-by-one <= in validate_attestation_signature rejects every honest OCW attestation
|
|
9
|
30
|
October 11, 2026
|
|
Distributor reward exceeding excess reserves bricks stake, honest-flow liveness
|
|
2
|
15
|
October 7, 2026
|
|
Gatekeeper rotation never revokes old keys, pre-rotation quorum keeps signing authority over gap sessions and mints unmetered GHST via govern
|
|
3
|
19
|
October 7, 2026
|
|
Preclaims address-package collision leaves 41.4e18 shares unclaimable
|
|
3
|
14
|
October 7, 2026
|
|
Re: topic 87 — confirming the WeavingStates root cause (converges with topic 100)
|
|
2
|
14
|
October 7, 2026
|
|
Gatekeeper rotate signature is not chain-bound, replays on any chain sharing the key set
|
|
1
|
9
|
October 7, 2026
|
|
DEX transaction deadline silently ineffective: secondsToWait is always a string, every deadline encodes as year 7646
|
|
0
|
6
|
October 7, 2026
|
|
Informational: sign-on-Enter without confirmation screen; f64 amount-parsing dust
|
|
0
|
5
|
October 7, 2026
|
|
Stale set_payee calldata: reward destination shown in UI can differ from what gets signed
|
|
2
|
15
|
October 6, 2026
|
|
[ideation] Secure Offchain Storage via Session Key Derivation and Zeroization
|
|
0
|
7
|
October 5, 2026
|
|
[H1] ghost-eye stores sr25519 seeds in plaintext on disk — wallet-keys, address-book, and node stash keys world-readable
|
|
4
|
28
|
October 5, 2026
|
|
[High] One reverting token ID permanently truncates the claim snapshot(2)
|
|
2
|
20
|
October 5, 2026
|
|
Wallet name with ':' corrupts file format, persistent panic on every startup
|
|
0
|
5
|
October 5, 2026
|
|
SS58 version validation fall-through: wrong-network address still signed and submitted
|
|
0
|
5
|
October 5, 2026
|
|
Forester.py json.dump without sort_keys makes output fragile to row order
|
|
0
|
6
|
October 5, 2026
|
|
Bridge over-balance input sends the full balance while the UI shows a different amount
|
|
2
|
13
|
October 4, 2026
|