utilityjnr1

Issues somebody may already be working on are listed last. List everything by date

• [Feature] server: PUT /policy/:walletId silently overwrites rules without version/ETag concurrency check, causing lost updates

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement policy-engine server

  Difficulty 3/5 1-2 days Newbie friendliness 68/100

  utilityjnr1/lumena#366 · Opened Oct 18, 2026

  Maintainers usually reply within 1 day

• [Feature] react: LumenPolicyEditor does not validate that allowlist and blocklist entries are valid Stellar public keys

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue react

  Difficulty 2/5 1-3 hours Newbie friendliness 84/100

  utilityjnr1/lumena#365 · Opened Oct 18, 2026

  Maintainers usually reply within 1 day

• [Feature] core: Telemetry redactSensitive does not redact Stellar secret keys (S...) from log payloads

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  core security

  Difficulty 2/5 1-3 hours Newbie friendliness 75/100

  utilityjnr1/lumena#364 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] react: LumenQrScanner component does not stop the camera stream on unmount, causing a live camera leak

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug react

  Difficulty 2/5 1-3 hours Newbie friendliness 94/100

  utilityjnr1/lumena#363 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] react: LumenSwapWidget has no slippage protection UI warning when price impact exceeds threshold

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement react

  Difficulty 3/5 1-2 days Newbie friendliness 78/100

  utilityjnr1/lumena#362 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] server: webhook delivery log is in-memory only and unbounded — server will leak memory under high webhook traffic

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement performance server webhooks

  Difficulty 3/5 1-2 days Newbie friendliness 78/100

  utilityjnr1/lumena#361 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] social-recovery: execute_recovery has no on-chain key rotation — it only returns a new address without enforcing the swap

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement security soroban

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  utilityjnr1/lumena#360 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] server: health endpoint hardcodes version as 0.1.0 instead of reading from package.json

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement good first issue server

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  utilityjnr1/lumena#359 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] token-sep41: zero-amount transfers succeed silently instead of being rejected

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug soroban

  Difficulty 2/5 1-3 hours Newbie friendliness 68/100

  utilityjnr1/lumena#358 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] server: DELETE /policy/:walletId is not wrapped in wrapHandler, so thrown errors bypass the global error handler

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug server

  Difficulty 2/5 Half a day Newbie friendliness 72/100

  utilityjnr1/lumena#357 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] react: useSessionKey revokeSession is client-side only — server-side and on-chain key remains active after UI revocation

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement react security

  Difficulty 4/5 3-5 days Newbie friendliness 52/100

  utilityjnr1/lumena#356 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] spend-policy: apply_pending_limit has no timelock enforcement — instant limit changes undermine the security delay

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement security soroban

  Difficulty 2/5 1-3 hours Newbie friendliness 80/100

  utilityjnr1/lumena#355 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] server: cosign audit event omits txHash for approved transactions, making audit log incomplete

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement server

  Difficulty 3/5 Half a day Newbie friendliness 76/100

  utilityjnr1/lumena#354 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] mpc-verifier: verify() accepts a single 64-byte signature but does not aggregate — multi-party verification is never actually performed

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement security soroban

  Difficulty 5/5 Over a week Newbie friendliness 28/100

  utilityjnr1/lumena#353 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] oracle-spend-limit: set_price is callable by anyone — price feed can be manipulated to bypass spend limits

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  security soroban

  Difficulty 3/5 1-2 days Newbie friendliness 72/100

  utilityjnr1/lumena#352 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Bug] use-gasless-transaction: optimistic balance rollback uses wrong snapshot on concurrent calls

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug react

  Difficulty 2/5 Half a day Newbie friendliness 78/100

  utilityjnr1/lumena#351 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] server: GET /wallets loads all wallets into memory before paginating — will OOM at scale

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement performance server

  Difficulty 4/5 3-5 days Newbie friendliness 68/100

  utilityjnr1/lumena#350 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] inheritance-vault: heartbeat is owner-only but owner address is never stored, making the function always panic

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug soroban

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  utilityjnr1/lumena#349 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Security] server: audit WebSocket stream has no authentication — any unauthenticated client can observe all policy decisions

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  security server

  Difficulty 4/5 3-5 days Newbie friendliness 55/100

  utilityjnr1/lumena#348 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] server: policy engine uses in-memory store by default with no persistence — server restart wipes all policies

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement policy-engine server

  Difficulty 3/5 1-2 days Newbie friendliness 70/100

  utilityjnr1/lumena#347 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] proxy: cancel_upgrade is restricted to admin only, preventing signers from cancelling a malicious upgrade proposal

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement security soroban

  Difficulty 3/5 1-2 days Newbie friendliness 74/100

  utilityjnr1/lumena#346 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Feature] escrow: add dispute timeout so arbitration cannot be stalled indefinitely by an unresponsive arbiter

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement soroban

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  utilityjnr1/lumena#345 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Security] paymaster: sponsor_invocation does not validate the invoker is the epoch-tracked user, allowing spend quota theft

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug security soroban

  Difficulty 4/5 3-5 days Newbie friendliness 58/100

  utilityjnr1/lumena#344 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Bug] use-social-recovery: initiateRecovery and approveRecovery use GET instead of POST, leaking wallet data in URL query params

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug react security

  Difficulty 3/5 Half a day Newbie friendliness 70/100

  utilityjnr1/lumena#343 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Bug] server: /cosign/batch uses undefined cosignFeeBumpLimiter instead of the configured rateLimiter

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug server

  Difficulty 2/5 1-3 hours Newbie friendliness 82/100

  utilityjnr1/lumena#342 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Bug] smart-account: missing signer-set update function makes the contract permanently immutable after init

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug soroban

  Difficulty 4/5 3-5 days Newbie friendliness 52/100

  utilityjnr1/lumena#341 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Bug] session-keys: validate_session_call always returns false due to missing reverse owner index

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug soroban

  Difficulty 3/5 1-2 days Newbie friendliness 78/100

  utilityjnr1/lumena#340 · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• [Bug] Add memo parameter to Wallet.send() and Wallet.buildPaymentTransaction()

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug core stellar Stellar Wave

  Difficulty 2/5 1-3 hours Newbie friendliness 82/100

  utilityjnr1/lumena#177 · 4 comments · 1 assignee · Opened Sep 25, 2026

  Maintainers usually reply within 1 day

• [Feature] Support Futurenet network configuration in StellarClient

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  core enhancement good first issue soroban stellar Stellar Wave

  Difficulty 2/5 1-3 hours Newbie friendliness 85/100

  utilityjnr1/lumena#164 · 2 comments · 1 assignee · Opened Sep 25, 2026

  Maintainers usually reply within 1 day

• [Feature] Add revokeSessionKey helper function to @lumen/core

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  core enhancement stellar Stellar Wave

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  utilityjnr1/lumena#163 · 5 comments · 1 assignee · Opened Sep 25, 2026

  Maintainers usually reply within 1 day

• [Feature] Add BIP-39 mnemonic phrase wallet generation and recovery to KeyManager

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  core enhancement keys Stellar Wave

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  utilityjnr1/lumena#162 · 6 comments · 1 assignee · Opened Sep 25, 2026

  Maintainers usually reply within 1 day

• [Frontend] React Native and Expo Mobile Adaptor Layer for Lumen Core and SDK

  Possibly taken @elizabethklien3-pixel claimed this 1 day ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement react Stellar Wave

  Difficulty 4/5 3-5 days Newbie friendliness 25/100

  utilityjnr1/lumena#275 · 2 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Frontend] Multi-Network Context Switcher and Network Status Bar in @lumen/react

  Possibly taken @cyber-punk112 claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement react Stellar Wave

  Difficulty 3/5 1-2 days Newbie friendliness 45/100

  utilityjnr1/lumena#258 · 3 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Backend] Dynamic CORS Domain Whitelist Provider with Live Database Backing

  Possibly taken @euniceotowo claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement server Stellar Wave

  Difficulty 3/5 1-2 days Newbie friendliness 42/100

  utilityjnr1/lumena#255 · 2 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Backend] Anti-Replay Nonce Validation and Transaction Cache in Memory and Redis

  Possibly taken @euniceotowo claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement server Stellar Wave

  Difficulty 3/5 1-2 days Newbie friendliness 55/100

  utilityjnr1/lumena#254 · 3 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Backend] Transaction Ingestion and Ledger Reconciliation Worker with Horizon Streaming

  Possibly taken @OtowoSamuel claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  ci-cd enhancement server Stellar Wave

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  utilityjnr1/lumena#253 · 2 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Backend] Automatic Sponsor Hot-Wallet Refill Service via Exchange API and Horizon Listener

  Possibly taken @OtowoSamuel claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement server Stellar Wave

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  utilityjnr1/lumena#252 · 2 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Backend] Hardened Production Docker Image with Multi-Stage Build and Non-Root User

  Possibly taken @OtowoSamuel claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  ci-cd enhancement server Stellar Wave

  Difficulty 3/5 Half a day Newbie friendliness 62/100

  utilityjnr1/lumena#251 · 3 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Backend] WebSocket Server for Live Transaction Broadcasts, Confirmations, and Policy Events

  Possibly taken @OtowoSamuel claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement server Stellar Wave

  Difficulty 4/5 3-5 days Newbie friendliness 42/100

  utilityjnr1/lumena#250 · 3 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Backend] Prometheus Alerting Rules, SLO Dashboards, and PagerDuty Webhook Integration

  Possibly taken @euniceotowo claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement server Stellar Wave

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  utilityjnr1/lumena#249 · 4 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Backend] Tamper-Proof Cryptographic Audit Log with Merkle Tree Hash Chaining

  Possibly taken @euniceotowo claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement security server Stellar Wave

  Difficulty 4/5 3-5 days Newbie friendliness 28/100

  utilityjnr1/lumena#248 · 2 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Backend] Webhook Dispatcher Retry Pipeline with Exponential Backoff and Dead-Letter Queue (DLQ)

  Possibly taken @k2ghostyou claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  ci-cd enhancement server Stellar Wave

  Difficulty 4/5 3-5 days Newbie friendliness 30/100

  utilityjnr1/lumena#236 · 3 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Backend] SEP-10 Web Authentication Protocol Endpoint with JWT Issuance and Challenge Verification

  Possibly taken @k2ghostyou claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement server Stellar Wave

  Difficulty 4/5 3-5 days Newbie friendliness 40/100

  utilityjnr1/lumena#235 · 2 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Backend] Multi-Tenant API Key Management with Scoped Permissions and Tiered Rate Quotas

  Possibly taken @k2ghostyou claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement server Stellar Wave

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  utilityjnr1/lumena#234 · 3 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Backend] Distributed Sequence Number Reservation & Concurrency Queue Using Redis Redlock

  Possibly taken @k2ghostyou claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement server Stellar Wave

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  utilityjnr1/lumena#233 · 3 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Contract] Soroban Gas and Resource Footprint Profiling Test Suite

  Possibly taken @IfyJustin91 claimed this 1 day ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement performance soroban Stellar Wave testing

  utilityjnr1/lumena#230 · 4 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day

• [Contract] Automated Batch Settlement and Micro-Payment Streaming Contract

  Possibly taken @IfyJustin91 claimed this 1 day ago. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement soroban Stellar Wave

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  utilityjnr1/lumena#228 · 3 comments · 1 assignee · Opened Oct 16, 2026

  Maintainers usually reply within 1 day