Search results

[SECURITY] LOW: /api/stats uses service role with no auth annotation — risk of future sensitive field exposure

Status: Open.

#1031 In dcccrypto/percolator-launch;

· dcccrypto opened on Mar 11, 2026

[SECURITY] cargo audit: RUSTSEC-2024-0344 + RUSTSEC-2022-0093 in percolator-prog test deps (LOW)

Status: Open.

#966 In dcccrypto/percolator-launch;

· dcccrypto opened on Mar 8, 2026

[SECURITY-PROCESS] Repeat merge-without-sign-off violations — sprint S2 tracker

Status: Open.

#955 In dcccrypto/percolator-launch;

· dcccrypto opened on Mar 8, 2026

[PROCESS] Repeated security sign-off bypass — PRs #953, #39, direct commit d412901a

Status: Open.

#954 In dcccrypto/percolator-launch;

· dcccrypto opened on Mar 8, 2026

[SECURITY-PROCESS] Repeated direct commits to main without security review (3 violations today)

Status: Open.

#930 In dcccrypto/percolator-launch;

· dcccrypto opened on Mar 8, 2026

[SECURITY] Process violation: direct commit to main without security review (PM, commit d412901a)

Status: Open.

#924 In dcccrypto/percolator-launch;

· dcccrypto opened on Mar 8, 2026

[SECURITY] LOW: bigint-buffer 1.1.5 — Buffer Overflow (no upstream patch, Solana transitive)

Status: Open.

#690 In dcccrypto/percolator-launch;

· dcccrypto opened on Mar 5, 2026

🔒 Secret Rotation Checklist (post-PR #234 merge)

bugSomething isn't workingSomething isn't working

Status: Open.

#249 In dcccrypto/percolator-launch;

· dcccrypto opened on Feb 20, 2026