All issues

Search results

[CI][SECURITY] The dependency audit gate never runs — 19 high advisories accumulated behind a SKIPPED job

Status: Open.

#2502 In dcccrypto/percolator-launch;

· dcccrypto opened on Aug 6, 2026

Security Vulnerability Report — Percolator Launch

Status: Open.

#2499 In dcccrypto/percolator-launch;

· Bayyan16 opened on Aug 6, 2026

/api/open-interest/[slab] returns 200 zeros on failure (transient outage looks like a real $0 market)

Status: Open.

#2489 In dcccrypto/percolator-launch;

· 0x-SquidSol opened on Aug 5, 2026

Trader API endpoints use in-memory rate limiter – bypassable in serverless deployments

Status: Open.

#2487 In dcccrypto/percolator-launch;

· Bayyan16 opened on Aug 5, 2026

IP blocklist silently drops IPv6 entries – attackers can bypass IP bans entirely

Status: Open.

#2486 In dcccrypto/percolator-launch;

· Bayyan16 opened on Aug 5, 2026

pyth-pinned markets are excluded from the stale-oracle trading block

Status: Open.

#2484 In dcccrypto/percolator-launch;

· Bayyan16 opened on Aug 5, 2026

C:/Program Files/Git/api/stats over-counts protocol OI — phantom-OI suppression skipped in the shared-loader path

Status: Open.

#2482 In dcccrypto/percolator-launch;

· 0x-SquidSol opened on Aug 5, 2026

Production CSP keeps script-src 'unsafe-inline' (nonce dropped for static caching)

Status: Open.

#2481 In dcccrypto/percolator-launch;

· 0x-SquidSol opened on Aug 5, 2026

keeper-cosign accepts an unbounded caller-supplied initial mark

Status: Open.

#2479 In dcccrypto/percolator-launch;

· 0x-SquidSol opened on Aug 5, 2026

Rate limiters silently fail open (per-instance) when Upstash is unconfigured

Status: Open.

#2477 In dcccrypto/percolator-launch;

· 0x-SquidSol opened on Aug 5, 2026

Keeper HMAC not bound to method/path and has no nonce (replay within the 5-minute window)

Status: Open.

#2476 In dcccrypto/percolator-launch;

· 0x-SquidSol opened on Aug 4, 2026

Playground faucet per-wallet limit is in-memory only (resets on cold start)

Status: Open.

#2474 In dcccrypto/percolator-launch;

· 0x-SquidSol opened on Aug 4, 2026