Search results

Security: webhook subscription endpoint allows SSRF to internal services

Status: Open.

#2052 In Scottcjn/Rustchain;

· createkr opened on Apr 4, 2026

Security: download page path traversal allows arbitrary file read

Status: Open.

#2050 In Scottcjn/Rustchain;

· createkr opened on Apr 4, 2026

Security: TLS certificate validation disabled in wallet and miner clients allows MITM

Status: Open.

#2048 In Scottcjn/Rustchain;

· createkr opened on Apr 4, 2026

Security: hardcoded default P2P HMAC secret enables forged gossip messages on default deployments

Status: Open.

#2046 In Scottcjn/Rustchain;

· createkr opened on Apr 4, 2026

Documentation: Missing path to QUICKSTART.md in README

Status: Open.

#2044 In Scottcjn/Rustchain;

· universe7creator opened on Apr 4, 2026

Security: install.sh downloads and executes remote code without verification

Status: Open.

#2033 In Scottcjn/Rustchain;

· smallshao opened on Apr 1, 2026

[Security]

bugSomething isn't workingSomething isn't working

Status: Open.

#2023 In Scottcjn/Rustchain;

· yatescleta-afk opened on Mar 31, 2026

[Medium] TX-003: Pending Pool DoS via Mass Submissions

red-team

securitySecurity-related changeSecurity-related change

Status: Open.

#2019 In Scottcjn/Rustchain;

· RavMonSOL opened on Mar 30, 2026

[High] TX-002: Balance Underflow on Concurrent Transaction Confirmation

red-team

securitySecurity-related changeSecurity-related change

Status: Open.

#2018 In Scottcjn/Rustchain;

· RavMonSOL opened on Mar 30, 2026

[Critical] TX-001: Double-Spend via Concurrent Pending Submissions (TOCTOU)

red-team

securitySecurity-related changeSecurity-related change

Status: Open.

#2017 In Scottcjn/Rustchain;

· RavMonSOL opened on Mar 30, 2026

[BOUNTY] rustchain-prometheus-exporter — Prometheus metrics for RustChain node

Status: Open.

#2000 In Scottcjn/Rustchain;

· RavMonSOL opened on Mar 29, 2026

Bug: /tx/pending endpoint lacks maximum limit, memory DoS risk

securitySecurity-related changeSecurity-related change

Status: Open.

#1999 In Scottcjn/Rustchain;

· RavMonSOL opened on Mar 29, 2026