Issues

[Bug]: remove_asset uses exact string match while add_asset uses case-insensitive match for the same asset identity
Orbit-Wal/contract#93 · opened on Aug 28, 2026
5
[Enhancement]: admin_transferred event is identical for routine transfer and emergency guardian recovery — undermines security monitoring
Orbit-Wal/contract#91 · opened on Aug 28, 2026
3
[Bug]: MIN_GUARDIANS_FOR_RECOVERY is enforced only when set_recovery_config is called — remove_guardian can silently degrade below it
Orbit-Wal/contract#90 · opened on Aug 28, 2026
6
[Bug]: remove_asset doesn't clean up SpendLimit/DailySpent — inconsistent with migrate_user_assets, which does the same cleanup for the same conceptual operation
Orbit-Wal/contract#89 · opened on Aug 28, 2026
7
[Bug]: record_spend/set_spend_limit take a free-form asset_code string, completely decoupled from the case-insensitive asset registry issue #29 built
Orbit-Wal/contract#88 · opened on Aug 28, 2026
4
[Bug]: No cancel_upgrade — a hostile admin's pending upgrade survives a successful guardian recovery and permanently blocks all future propose_upgrade calls
Orbit-Wal/contract#87 · opened on Aug 28, 2026
2
[Bug]: is_native uses case-sensitive equality while duplicate-detection is case-insensitive — a squatted 'xlm' entry can permanently block real native XLM registration
Orbit-Wal/contract#86 · opened on Aug 28, 2026
4
[Bug]: token-wrapper's Allowance is keyed only by (owner, spender), not (owner, spender, token) — approving a second asset silently destroys the first asset's allowance
Orbit-Wal/contract#85 · opened on Aug 28, 2026
3
[Bug]: set_spend_limit has none of record_spend's compromised-key defenses — a stolen key can just raise its own limit before draining
Orbit-Wal/contract#83 · opened on Aug 28, 2026
2
[Bug]: Issue #8's fix landed in the wrong contract — the SpendLimit/DailySpent code/issuer collision it describes is still live on main
Orbit-Wal/contract#82 · opened on Aug 28, 2026
3