All issues

Search results

/api/contracts/escrow/refund missing object-level authorization — any authenticated user can refund any agreement

Status: Open.

#42 In circlefin/arc-escrow;

· pplmaverick opened on Aug 18, 2026

RLS disabled on core tables since 2024-11 — pattern unsafe if deployed beyond testnet

Status: Open.

#41 In circlefin/arc-escrow;

· pplmaverick opened on Aug 18, 2026

RefundProtocol.sol: robustness & correctness hardening (dead releaseTimestamp, refund-after-withdraw double-pay, unchecked ERC20 returns)

Status: Open.

#40 In circlefin/arc-escrow;

· osr21 opened on Aug 17, 2026

bug: parseAmount accepts malformed amount strings with trailing characters

Status: Open.

#38 In circlefin/arc-escrow;

· AtakanGs opened on Aug 15, 2026

Add withdraw/transfer USDC from Circle wallet to external EOA

Status: Open.

#33 In circlefin/arc-escrow;

· ely67 opened on Aug 5, 2026

docs: Proposal for comprehensive developer documentation

Status: Open.

#22 In circlefin/arc-escrow;

· HusseinAdeiza opened on May 18, 2026

https://github.com/circlefin/arc-escrow

Status: Open.

#8 In circlefin/arc-escrow;

· arpdoul opened on Mar 25, 2026