Commit Graph

Select branches

Hide Pull Requests

audit-2026-07-27

audit-2026-08-03

feature/bug-reports

main

Mono Color

• 575f1a5354 Readiness, Electrum status, audit browsing and logs (B-92, API-37, API-46, API-47, AUD-34, AUD-41, ARC-02, ARC-09, ARC-61, ELC-29, SEC-48) main davideandClaude Sonnet 5.5 2026-10-18 01:15:22 +02:00
• 9520c80dcf Close the smaller state inconsistencies (B-96, BET-02, BET-07, WDR-01, WDR-15, TX-16, TX-18, TX-27, TX-29, DEP-15, DEP-16, AUD-30, AUD-46, DAT-22) davideandClaude Sonnet 5.5 2026-10-18 01:08:14 +02:00
• 24e5fc3d8b Bound credentials, brake password changes, cap bug reports, page the user list, structure every error (B-94, SEC-54, SEC-55, API-09, API-15, API-16, API-19, API-21, API-28, API-33, REG-12, AUD-42) davideandClaude Sonnet 5.5 2026-10-18 00:59:25 +02:00
• c1b192f6d1 Harden the container: non-root, pinned images and dependencies, the key in a file (B-91, SEC-51, SEC-52, SEC-53; closes B-71, B-72) davideandClaude Sonnet 5.5 2026-10-18 00:54:23 +02:00
• 40ac490826 Safe restore from a backup: START_PAUSED and the derivation-gap check (B-90, REG-15, OPS-27) davideandClaude Sonnet 5.5 2026-10-18 00:43:45 +02:00
• 55d852fe08 Verify the master key against the database at startup (B-89, SEC-49, SEC-50, SEC-09) davideandClaude Sonnet 5.5 2026-10-18 00:38:26 +02:00
• 32df50cb75 Select coins until the change output is guaranteed (B-98, BET-24) davideandClaude Sonnet 5.5 2026-10-18 00:35:17 +02:00
• 264441f5d6 Align docs with the code: stale columns, B-92 health threshold, duplicates davideandClaude Sonnet 5.5 2026-10-18 00:32:24 +02:00
• cef05943f9 Keep the fee-rate ceiling below the node's maxfeerate (B-100) davideandClaude Sonnet 5.5 2026-10-18 00:32:24 +02:00
• 2c0e71a74c Refuse an Electrum server that is not on the PLM chain (B-99, ELC-30) davideandClaude Sonnet 5.5 2026-10-18 00:32:24 +02:00
• 1433813ec7 Install SQLAlchemy's asyncio extra so greenlet ships in the image davideandClaude Sonnet 5.5 2026-10-17 16:29:21 +02:00
• 8b182ac8b6 Snapshot the bet cost, fee address and pool cap onto the round at open, and cap the pool (B-95, RND-05, RND-06, RND-23, BET-20, BET-21, DAT-26, DAT-27, DAT-61, DAT-62, API-21, API-30, API-31, ADR-10, LIM-16) davideandClaude Sonnet 5.5 2026-10-16 15:12:00 +02:00
• ccd15807ed Drop a dust-sized change into the fee on an RBF bump and audit every refused bump (B-87, TX-11, TX-24, AUD-40, AUD-09, ADR-19) davideandClaude Sonnet 5.5 2026-10-16 14:53:10 +02:00
• 54dbffb552 Credit deposits at deposit_confirmations and verify the round's coins with the quorum before paying (B-82, DEP-03, DEP-04, DEP-09, DEP-12, DEP-14, ELC-17, ELC-27, RND-21, RND-22, RND-25, RND-39, DAT-10, DAT-11, DAT-24, DAT-62, DAT-67, DAT-68, AUD-12, AUD-44, AUD-45, API-30, API-31, API-36, ADR-06, ADR-52) davideandClaude Sonnet 5.5 2026-10-16 14:25:35 +02:00
• daa85cf4f0 Give every payout a bump reserve output and refuse configs that cannot pay a round (B-79, RND-21, RND-23, RND-24, RND-27, RND-38, RND-40, DAT-73, API-31, API-36, TX-11, ADR-17, ADR-29) davideandClaude Sonnet 5.5 2026-10-16 13:55:51 +02:00
• 473d541ab5 Resume a round in drawing from the database after an exception or a restart (B-81, RND-01, RND-15, RND-36, ARC-27, OPS-09, OPS-13, LIM-01) davideandClaude Sonnet 5.5 2026-10-16 13:34:43 +02:00
• db24287ea5 Make the draw a commit-reveal at a fixed, confirmed, quorum-agreed height with a public proof (B-73, RND-14 … RND-20, RND-33 … RND-37, DAT-61 … DAT-66, API-25, API-45, AUD-24 … AUD-27, AUD-37, ELC-15, SEC-56, ADR-24, ADR-25) davideandClaude Sonnet 5.5 2026-10-14 16:29:09 +02:00
• 82d078e2d6 Rotate away from a connected server that stopped following the chain (B-86, ELC-21, ARC-26) davideandClaude Sonnet 5.5 2026-10-14 16:01:44 +02:00
• 50b68d2957 Follow and record chain reorganisations, pausing on deep ones (B-85, ELC-09, ELC-22, ELC-23, ELC-24, AUD-38, DAT-69) davideandClaude Sonnet 5.5 2026-10-14 15:56:21 +02:00
• ca50ef62f3 Require real proof of work in headers and link every advance to the tip (B-74, ELC-11, ELC-12, ELC-22, ELC-23) davideandClaude Sonnet 5.5 2026-10-14 15:45:34 +02:00
• a3c51719bd Confirm transactions by merkle proof and reinstate coins only on a quorum (B-83, TX-06, TX-22, TX-23, ELC-25, ELC-26, DEP-02, DEP-08, AUD-18, ADR-07) davideandClaude Sonnet 5.5 2026-10-14 15:29:30 +02:00
• a4b160e240 Abandon a transaction only on proof, and keep watching failed rows (B-78, TX-15, TX-17, TX-23, TX-26, ELC-28, DAT-33, DAT-36, DAT-69, DAT-72, AUD-11, AUD-12, AUD-31, AUD-39, API-32) davideandClaude Sonnet 5.5 2026-10-14 15:07:09 +02:00
• f936d6660c Track every version of a bumped transaction and write the RBF replacement before broadcasting it (B-77, TX-12, TX-13, TX-19, TX-21, DAT-13, DAT-14, DAT-34, DAT-44, DAT-45, DAT-70, DAT-71) davideandClaude Sonnet 5.5 2026-10-14 14:46:43 +02:00
• 2b6ddb019b Never roll back an ambiguous broadcast as if it had been refused (B-76, TX-04, TX-05, TX-20, TX-21, BET-16, BET-17, BET-23, WDR-11, WDR-12, WDR-16, API-13) davideandClaude Sonnet 5.5 2026-10-14 14:22:20 +02:00
• 13cb66cc06 Require a real Electrum quorum and allow certificate pinning (B-84, ELC-01, ELC-03, ELC-14, ELC-19, ARC-20, OPS-12) davideandClaude Sonnet 5.5 2026-10-14 14:04:35 +02:00
• fd6a91e93d Give every round its own pool address (B-80, RND-35, DAT-60, DAT-11, REG-14, SEC-08, BET-12, RND-22, WDR-14, SEC-43, API-23, API-36) davideandClaude Sonnet 5.5 2026-10-14 13:52:32 +02:00
• cc63753439 Test that the migration chain keeps the expression indexes (B-97, DAT-75, DAT-56, ARC-62) davideandClaude Sonnet 5.5 2026-10-14 12:22:08 +02:00
• daec4749c2 Survive oversized Electrum replies and ignore dust deposits (B-75, ELC-20, DEP-01, DAT-10) davideandClaude Sonnet 5.5 2026-10-14 12:14:12 +02:00
• b424f670c5 Restructure docs: docs-first, SSOT, one ADR per decision davideandClaude Sonnet 5.5 2026-10-14 12:05:57 +02:00
• 7ba8e22bb4 Real SQLite transactions: BEGIN IMMEDIATE and synchronous=FULL (B-88, DAT-74, DAT-52, ARC-07, TX-28, BET-11, DAT-16) davideandClaude Sonnet 5.5 2026-09-29 16:26:01 +02:00
• 4be58709d1 Complete the target spec for the 2026-09-28 review (B-73..B-98) davideandClaude Opus 5.5 2026-09-29 09:17:52 +02:00
• 88221b0dbd Document the 2026-09-28 specification review and its fixes (B-73..B-97) davideandClaude Sonnet 5 2026-09-28 15:51:13 +02:00
• 61efbb0e37 Replace flowchart/ with a traceable specification in docs/ davideandClaude Opus 5.5 2026-09-28 12:16:01 +02:00
• 526a649c8b Say what bets and withdrawals actually exclude (B-70) audit-2026-08-03 davideandClaude Opus 5 2026-08-04 16:16:13 +02:00
• 666cb1a0c9 Retire in-code comments that outlived what they described (B-69) davideandClaude Opus 5 2026-08-04 16:00:57 +02:00
• 162ceed40f Describe the code the docs actually ship with (B-68) davideandClaude Opus 5 2026-08-04 14:33:32 +02:00
• 5f6abe5b32 Validate and bound the QR endpoint (B-67) davideandClaude Opus 5 2026-08-04 14:18:22 +02:00
• 23d58796b6 Refuse to open a round that could not pay its winner (B-66) davideandClaude Opus 5 2026-08-04 14:13:00 +02:00
• c4b2dc3ea2 Advertise the jackpot that will actually be paid (B-65) davideandClaude Opus 5 2026-08-04 11:52:10 +02:00
• c0314e2bf0 Never swap the tip's hash sideways, and never split it from its height (B-64) davideandClaude Opus 5 2026-08-04 10:29:37 +02:00
• 8a0ebecfcc Never let a draw be seeded by a block that predates the close (B-63) davideandClaude Opus 5 2026-08-04 10:01:21 +02:00
• 8dd913ec59 Always keep a change output, so every tx stays fee-bumpable (B-62) davideandClaude Opus 5 2026-08-03 23:36:55 +02:00
• 37cc5eeeb5 Snapshot a round's timing when it opens (B-61) davideandClaude Opus 5 2026-08-03 23:25:56 +02:00
• 77e07e87dc Audit-log bug report status changes (B-60) davideandClaude Opus 5 2026-08-03 22:59:00 +02:00
• 6246b13247 Corroborate deposit credits, not just external spends (B-59) davideandClaude Opus 5 2026-08-03 22:40:15 +02:00
• 0aac73e557 Bound registrations with a per-IP quota instead of failure backoff (B-58) davideandClaude Opus 5 2026-08-03 22:32:20 +02:00
• 57721355f0 Make usernames one case-insensitive namespace (B-57) davideandClaude Opus 5 2026-08-03 22:27:15 +02:00
• ab65728bdc Bound the rate limiter's bucket dict (B-56) davideandClaude Opus 5 2026-08-03 22:22:51 +02:00
• 9c7befe595 Hash and verify passwords off the event loop (B-55) davideandClaude Opus 5 2026-08-03 22:18:33 +02:00
• 421fe72a8b Record B-54's fixing commit in BUGS.md davideandClaude Opus 5 2026-08-03 22:14:03 +02:00
• 907e32e9e0 Make X-Forwarded-For trustworthy instead of attacker-controlled (B-54) davideandClaude Opus 5 2026-08-03 22:14:03 +02:00
• 8f3cdcb2f8 Record B-53's fixing commit in BUGS.md davideandClaude Opus 5 2026-08-03 22:06:29 +02:00
• 64f62291d2 Close the window where a bet pays into a round it was left out of (B-53) davideandClaude Opus 5 2026-08-03 22:06:21 +02:00
• 025754c860 Cap participants per round and give the payout its own input limit (B-52) davideandClaude Opus 5 2026-08-03 16:21:33 +02:00
• 99d7a1ee00 Open the 2026-08-03 audit list (B-52 … B-72) davideandClaude Opus 5 2026-08-03 15:51:00 +02:00
• e5af15087c Polish /report-bug's visual design and refine bug report semantics feature/bug-reports davideandClaude Sonnet 5 2026-07-31 16:28:37 +02:00
• a384b08044 Translate /report-bug into all 7 languages, require English in the report itself davideandClaude Sonnet 5 2026-07-31 16:03:38 +02:00
• ee4e845c89 Add user bug reporting with admin triage (open/read/resolved) davideandClaude Sonnet 5 2026-07-31 15:50:40 +02:00
• 977bb762c7 Deduplicate the 70/30 prize split formula davideandClaude Sonnet 5 2026-07-31 15:04:33 +02:00
• fe909bedcf Don't double-count a bet/withdrawal's own change in pending balance (B-51) davideandClaude Sonnet 5 2026-07-31 15:03:53 +02:00
• 9207bbcb8f Don't reveal the win banner before winner_amount_sats is known (B-50) davideandClaude Sonnet 5 2026-07-31 15:03:42 +02:00
• 5cfe2d6f95 Merge audit-2026-07-27: fix all 25 findings of the second audit davide 2026-07-27 23:37:12 +02:00
• 0d2fef6502 Delete BUGS.md now that both audits' findings are closed davide 2026-07-27 23:37:02 +02:00
• e7f844b11f Publish an SSE update from the bet/withdrawal rollback paths (B-49) davide 2026-07-27 23:35:10 +02:00
• 4c80c1c5bf Cap the number of inputs a transaction may spend (B-48) davide 2026-07-27 23:30:06 +02:00
• 6a90136b50 Widen raw_tx_hex and payload_json from String to Text (B-47) audit-2026-07-27 davideandClaude Sonnet 5 2026-07-27 16:24:05 +02:00
• 31bc9a327f Compare admin token as UTF-8 bytes to avoid TypeError on non-ASCII input (B-46) davideandClaude Sonnet 5 2026-07-27 16:17:40 +02:00
• 6045c89ed0 Bound admin list endpoint limits, add status filter to pending-transactions (B-45) davideandClaude Sonnet 5 2026-07-27 16:10:53 +02:00
• a574db0d93 Align README and running-the-server.md with the Docker-only policy (B-44) davideandClaude Sonnet 5 2026-07-27 16:04:24 +02:00
• d60da11603 Add baseline HTTP security headers in Caddy (B-43) davideandClaude Sonnet 5 2026-07-27 15:44:47 +02:00
• 22e3cfb2be Disable Swagger/ReDoc/OpenAPI JSON by default (B-42) davideandClaude Sonnet 5 2026-07-27 15:34:49 +02:00
• 4124dc08e6 Check confirmation/existence via scripthash history, not verbose replies (B-41) davide 2026-07-27 15:27:58 +02:00
• 08c566d547 Restructure bump_fee into three phases, drop float fee math (B-40) davide 2026-07-27 15:14:58 +02:00
• 97545ad91f Run SQLite in WAL mode with a busy_timeout (B-39) davide 2026-07-27 14:53:22 +02:00
• 702b37b319 Cap SSE subscribers per client IP instead of only globally (B-38) davide 2026-07-27 14:44:15 +02:00
• 0b44fe632e Distinguish a pending-only balance from a truly insufficient one (B-37) davideandClaude Sonnet 5 2026-07-27 14:23:00 +02:00
• 7fa26df104 Make a stalled draw wait observable (B-36) davideandClaude Sonnet 5 2026-07-27 14:12:27 +02:00
• bb8b71278a Stamp UTC on naive API timestamps before serializing (B-35) davideandClaude Sonnet 5 2026-07-27 12:20:22 +02:00
• 739fc9fed2 Invalidate existing sessions on password change/reset (B-34) davideandClaude Sonnet 5 2026-07-27 12:02:23 +02:00
• 16802cafb6 Throttle login and registration with exponential backoff (B-33) davideandClaude Sonnet 5 2026-07-27 11:51:26 +02:00
• 17c557b8a3 Meet BIP125's relay minimum on every RBF bump, and cap the fee rate (B-32) davide 2026-07-27 11:16:20 +02:00
• fe5639a037 Update CLAUDE.md davide 2026-07-27 11:05:53 +02:00
• 12df04178e Resubscribe concurrently and in the background on reconnect (B-31) davide 2026-07-27 10:44:23 +02:00
• 63df38d30b Add a periodic deposit reconciler, and stop losing subscribe tasks (B-30) davide 2026-07-27 10:35:23 +02:00
• e8fdea0389 Corroborate an external spend before marking a UTXO gone (B-29) davide 2026-07-27 10:25:07 +02:00
• 0ce0562fd7 Validate Electrum headers and corroborate the draw's block (B-28) davide 2026-07-27 10:07:21 +02:00
• 7224ca0e66 Shorten the fixed B-25/26/27 entries in BUGS.md davide 2026-07-27 09:42:24 +02:00
• 933760e948 Decouple the RBF abandon clock from the bump clock (B-27) davideandClaude Sonnet 5 2026-07-27 09:39:38 +02:00
• 50a43ae3ca Retry a stuck payout automatically, and log every failure (B-26) davideandClaude Sonnet 5 2026-07-27 09:29:14 +02:00
• f13f6850b7 Persist the payout before broadcasting it (B-25) davideandClaude Sonnet 5 2026-07-27 09:19:53 +02:00
• 43d2321e0f Record the 25 open findings of the 2026-07-27 audit davideandClaude Opus 5 2026-07-27 09:02:34 +02:00
• f1a1145cda Detect UTXOs spent outside the platform and correct the cached balance davideandClaude Sonnet 5 2026-07-27 08:45:09 +02:00
• 447bbba83e Add placeholder guide/bug-report pages, and an exclamation-mark bug icon davideandClaude Sonnet 5 2026-07-27 08:35:47 +02:00
• f9f822f437 Document real fallback Electrum servers in .env.example davide 2026-07-27 08:21:12 +02:00
• 845ba98409 Record the audit outcome and the architecture it changed davideandClaude Opus 5 2026-07-27 00:35:28 +02:00
• dc4d5761df Format amounts, guard the loading state, and translate the new errors davideandClaude Opus 5 2026-07-27 00:35:14 +02:00
• 7c4e9983ea Survive a dropped Electrum connection, and fall back to other servers davideandClaude Opus 5 2026-07-27 00:34:59 +02:00
• 25f4a1c6b6 Refuse to start half-configured, and keep failures machine-readable davideandClaude Opus 5 2026-07-27 00:34:33 +02:00
• 85dce221c5 Validate admin config and registration input, and log config changes davideandClaude Opus 5 2026-07-27 00:32:48 +02:00
• daf66fd6bc Fix the round-open race, the advertised jackpot, and payout error handling davideandClaude Opus 5 2026-07-27 00:32:22 +02:00