Implement rate limiting per user for sensitive operations

[Smartdevs17]

Description

Sensitive operations (borrow, withdraw, liquidation) lack rate limiting. Implement per-user rate limits to prevent abuse.

Acceptance Criteria

• Rate limit configuration per operation type
• Sliding window per-user counter
• Rate limit headers in API responses
• Graduated penalties on violation (warning -> throttle -> block)
• Rate limit bypass for trusted users (institutions)
• Rate limit analytics dashboard

Technical Scope

• api/src/middleware/rate-limit.ts
• api/src/middleware/
• Edge: distributed rate limiting accuracy, user ID vs IP based limiting

[MorsH14]

@MorsH14 has applied to work on this issue as part of the Stellar Wave Program's 5th wave.

I recently finished work on rate limiting

ℹ️ Repo Maintainers: To accept this application, review their application or assign @MorsH14 to this issue.

[Theraxia]

@Theraxia has applied to work on this issue as part of the Stellar Wave Program's 5th wave.

can i get this please.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Theraxia to this issue.

[Calebux]

@Calebux has applied to work on this issue as part of the Stellar Wave Program's 5th wave.

Please assign

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Calebux to this issue.

[drips-wave]

Congratulations, @Calebux! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on June 2, 2026.

🧑‍💻 @Calebux: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊