All pull requests

Pull requests

• fix(escrow): enforce on-chain token custody in create_hold, revoke_hold and confirm_disbursement

  #455·comandanto opened Oct 25, 2026·4 of 7 tasks·

  ·
  1

  2

• feat(usdc-pool): support partial withdrawals and cap yield rate changes

  #454·comandanto opened Oct 25, 2026·4 of 7 tasks·

  ·
  1

  2

• fix(lending): lock collateral for pending loan requests on withdrawal

  #453·comandanto opened Oct 25, 2026·3 of 7 tasks·

  ·
  1

  2

• fix(auto-compound-vault): mitigate share inflation and rounding exploits

  #452·comandanto opened Oct 25, 2026·3 of 7 tasks·

  ·
  1

  2

• feat(airdrop): add admin-gated sweep_unclaimed to recover unclaimed TLEND

  #451·comandanto opened Oct 25, 2026·3 of 7 tasks·

  ·
  1

  2

• fix(lending): verify vault collateral in create_loan_request

  #450·comandanto opened Oct 25, 2026·3 of 7 tasks·

  ·
  1

  2

• fix(lending): expose set_oracle so multisig SetOracle can target lending

  #449·comandanto opened Oct 25, 2026·3 of 7 tasks·

  ·
  1

  2

• fix(liquidation-auction): enforce bidder payment and collateral settlement in place_bid

  #448·comandanto opened Oct 25, 2026·4 of 7 tasks·

  ·
  1

  3

• fix(cron): enforce execution timeout guards and dead-man switch heartbeats

  #447·umpireboulianne-design opened Oct 24, 2026·

  ·
  1

  2

• fix(loans): enforce on-chain collateral vault and health factor verification

  #446·umpireboulianne-design opened Oct 24, 2026·

  ·
  1

  2

• feat(referral_rewards): add multi-sig governance and pause controls

  #445·umpireboulianne-design opened Oct 24, 2026·

  ·
  1

  2

• feat(governance): add voting power checkpointing and execution timelock

  #444·umpireboulianne-design opened Oct 24, 2026·

  ·
  1

  2

• feat(lending): execute collateral seizure and transfer on loan liquidation

  #443·umpireboulianne-design opened Oct 24, 2026·

  ·
  1

  2

• fix(referrals): enforce atomic transaction and referee uniqueness in referral claim

  #442·umpireboulianne-design opened Oct 24, 2026·

  ·
  1

  2

• fix(repay): add idempotency key check and row-level locking in /api/loans/repay

  #441·umpireboulianne-design opened Oct 24, 2026·

  ·
  1

  2

• fix(api): handle NEXT_REDIRECT and return 401/403 JSON on API auth failures

  #440·umpireboulianne-design opened Oct 24, 2026·

  ·
  1

  2

• fix(notifications): enforce pagination upper bound and rate limiting on /api/notifications

  #439·umpireboulianne-design opened Oct 24, 2026·

  ·
  1

  2

• fix(metrics): enforce bearer token authentication on /api/metrics

  #438·umpireboulianne-design opened Oct 24, 2026·

  ·
  1

  2

• feat(lending): add reentrancy guard and deadline enforcement to flash loans

  #437·umpireboulianne-design opened Oct 24, 2026·

  ·
  1

  2

• feat(tlend_token): enforce MAX_TOTAL_SUPPLY cap in TlendTokenContract::mint

  #436·umpireboulianne-design opened Oct 24, 2026·

  ·
  1

  2