Issues

• [FIX] Frontend: isSmartWalletContract() returns true for any existing contract

  bugDificulty: MediumDripsnon-custodialphase-2Stellar Wave
  Galaxy-KJ/Galaxy-DevKit#496 · Filter by author KevinMB0220 opened on Oct 15, 2026
  4

  

• [FIX] Frontend: Soroswap swap panel uses a hard-coded wallet address and an invalid placeholder issuer

  bugDificulty: MediumDripsphase-2Stellar Wave
  Galaxy-KJ/Galaxy-DevKit#495 · Filter by author KevinMB0220 opened on Oct 15, 2026
  3

  

• [FIX] Auth: SocialLoginProvider login returns the first stored credential, whatever the userId is

  bugcoreDificulty: MediumDripsnon-custodialphase-1Stellar Wave
  Galaxy-KJ/Galaxy-DevKit#494 · Filter by author KevinMB0220 opened on Oct 15, 2026
  3

  

• [FIX] Soroban EventMonitor: one shared lastLedger cursor drops events across subscriptions, and streamEvents starts at ledger 1

  bugDificulty: MediumDripsphase-1SDKStellar Wave
  Galaxy-KJ/Galaxy-DevKit#490 · Filter by author KevinMB0220 opened on Oct 15, 2026
  2

  

• [FIX] Stellar SDK: AbiParser.validateArguments() only checks argument count, never types

  bugDificulty: MediumDripsphase-1SDKStellar Wave
  Galaxy-KJ/Galaxy-DevKit#489 · Filter by author KevinMB0220 opened on Oct 15, 2026
  4

  

• [FIX] Stellar SDK: FunctionSignatureBuilder.hashSignature() is a 32-bit string hash repeated 4× instead of SHA-256

  bugDificulty: EasyDripsgood first issuephase-1SDKStellar Wave
  Galaxy-KJ/Galaxy-DevKit#488 · Filter by author KevinMB0220 opened on Oct 15, 2026
  3

  

• [FIX] CLI: multisig proposal IDs come from Math.random().toString(36).substring(7) — short, non-unique, can overwrite proposals

  bugCLIDificulty: EasyDripsgood first issuephase-1Stellar Wave
  Galaxy-KJ/Galaxy-DevKit#486 · Filter by author KevinMB0220 opened on Oct 15, 2026
  3

  

• [FIX] CLI: galaxy deploy is fake — it sleeps, prints CONTRACT_<random> and a random *.vercel.app URL

  bugCLIDificulty: HardDripsphase-1Stellar Wave
  Galaxy-KJ/Galaxy-DevKit#485 · Filter by author KevinMB0220 opened on Oct 15, 2026
  1

• [REFACTOR] Contracts: galaxy-oracle and price-oracle are two diverging oracle contracts — consolidate into one

  contractsDificulty: MediumDripsenhancementphase-2Stellar Wave
  Galaxy-KJ/Galaxy-DevKit#484 · Filter by author KevinMB0220 opened on Oct 15, 2026
  1

• [CHORE] CI: Soroban contracts are never built, tested or linted in CI

  contractsDificulty: MediumDripsinfrastructurephase-1Stellar Wave
  Galaxy-KJ/Galaxy-DevKit#483 · Filter by author KevinMB0220 opened on Oct 15, 2026
  1

• [FIX] Contracts: vesting has no auth and holds no tokens — anyone can create schedules and claim_tokens transfers nothing

  bugcontractsDificulty: HardDripsphase-3Stellar Wave
  Galaxy-KJ/Galaxy-DevKit#481 · Filter by author KevinMB0220 opened on Oct 15, 2026
  1

• [FIX] Contracts: timelock has no admin and no auth — anyone can queue, execute or revoke, and execute never calls the target

  bugcontractsDificulty: HardDripsphase-3Stellar Wave
  Galaxy-KJ/Galaxy-DevKit#480 · Filter by author KevinMB0220 opened on Oct 15, 2026
  2

  

• [FIX] Contracts: smart-swap is missing require_auth on create/cancel, and initialize can be called again

  bugcontractsDificulty: MediumDripsphase-3Stellar Wave
  Galaxy-KJ/Galaxy-DevKit#479 · Filter by author KevinMB0220 opened on Oct 15, 2026
  2

  

• [FIX] Contracts: smart-swap uses a hard-coded oracle price (1000) and execute_swap never swaps

  bugcontractsDificulty: HardDripsphase-3Stellar Wave
  Galaxy-KJ/Galaxy-DevKit#478 · Filter by author KevinMB0220 opened on Oct 15, 2026
  1

• [FIX] KYC: KYCService.getStatus() always returns approved — the requireKYC gate lets every user through

  APIsbugDificulty: HardDripsphase-4Stellar Wave
  Galaxy-KJ/Galaxy-DevKit#477 · Filter by author KevinMB0220 opened on Oct 15, 2026
  1

• [REFACTOR] API servers: replace ~127 console.* calls with a structured logger

  APIsDificulty: MediumDripsenhancementStellar Wave
  Galaxy-KJ/Galaxy-DevKit#444 · Filter by author KevinMB0220 opened on Sep 23, 2026
  6

• [FEATURE] Analytics: Custom metrics and KPI definition engine (#74)

  APIscoreDificulty: HardDripsenhancementphase-4Stellar Wave
  Galaxy-KJ/Galaxy-DevKit#413 · Filter by author KevinMB0220 opened on Aug 26, 2026
  17