Skip to content

Issues: Joystream/audits

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

13 Open 1 Closed
13 Open 1 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

No deposit is charged for applying on working group role openings S2 - moderate Moderate severity
#14 opened Feb 25, 2021 by redzsina
No deposit is charged for adding posts on proposal threads S1 - low Low severity
#13 opened Feb 25, 2021 by redzsina
No deposit is charged for adding position openings for working groups S1 - low Low severity
#12 opened Feb 24, 2021 by mmostafas
No deposit is charged for adding staking account candidates to a membership S3 - high High severity
#11 opened Feb 24, 2021 by mmostafas
Multiple votes per user possible in the forum pallet via vote_on_poll S1 - low Low severity
#10 opened Feb 19, 2021 by mmostafas
The existential deposit is configured to be 0 S3 - high High severity
#9 opened Feb 17, 2021 by redzsina
In referendums, the voting stake is only locked for balances transfer S1 - low Low severity
#8 opened Feb 16, 2021 by redzsina
The set_stickied_threads extrinsic can be used to cheaply fill up the blockchain storage S2 - moderate Moderate severity
#6 opened Feb 10, 2021 by viniul
No deposit is charged for creating forum posts and threads S2 - moderate Moderate severity
#5 opened Feb 10, 2021 by viniul
In the commit-reveal voting scheme for referendums, UUID 4 is used for random salt generation instead of a cryptographic random generator S0 - info Info level severity
#4 opened Feb 9, 2021 by redzsina
Members can undermine the intent of the invite_member extrinsic by inviting themselves to get free tokens S1 - low Low severity
#3 opened Feb 4, 2021 by viniul
3
Missing checks on the referral_cut value could enable creating unlimited membership accounts for free S0 - info Info level severity
#2 opened Feb 4, 2021 by redzsina
3
Exponential complexity of weight calculation functions in multiple imported Substrate 2.0.0 pallets allows for Denial of Service attack, potentially stalling the blockchain S4 - critical Critical severity
#1 opened Feb 3, 2021 by redzsina
ProTip! Adding no:label will show everything without a label.