Issues

• The mainnet confirmation modal the README promises is unreachable dead code

  auditbugfrontendGrantFox OSSMaybe Rewardedsecurityseverity: criticalThird Campaign
  Favourorg/Stellar-forge#1157 · Filter by author Ejirowebfi opened on Aug 24, 2026
  5

  

• 🟠 One VITE_FACTORY_CONTRACT_ID shared across the network switcher — mainnet/testnet toggle points both networks at the same contract

  auditfrontendGrantFox OSSMaybe RewardedOfficial Campaign | FWC26severity: highThird Campaign
  Favourorg/Stellar-forge#1016 · Filter by author Ejirowebfi opened on Jul 21, 2026
  7

• 🟠 scValToString renders contract addresses as raw hex, not StrKey — per-token history and explorer links are broken

  auditfrontendGrantFox OSSMaybe RewardedOfficial Campaign | FWC26severity: highThird Campaign
  Favourorg/Stellar-forge#1015 · Filter by author Ejirowebfi opened on Jul 21, 2026
  4

  

• 🟡 No permissionless TTL keep-alive path or archived-entry recovery procedure

  auditcontractsdocumentationGrantFox OSSMaybe RewardedOfficial Campaign | FWC26severity: elevatedThird Campaign
  Favourorg/Stellar-forge#1011 · Filter by author Ejirowebfi opened on Jul 21, 2026
  3

  

• ✅ [Fixed] No off-chain event indexer — every page load re-derives state from raw RPC calls

  apiauditbugdocumentationGrantFox OSSMaybe RewardedOfficial Campaign | FWC26releasedseverity: criticalThird Campaign
  Favourorg/Stellar-forge#943 · Filter by author Ejirowebfi opened on Jul 16, 2026
  6

  

• ✅ [Fixed] transfer_admin and update_admin are duplicate entrypoints with inconsistent event emission

  auditbugcontractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26securityseverity: criticalThird Campaign
  Favourorg/Stellar-forge#916 · Filter by author Ejirowebfi opened on Jul 16, 2026
  2