Skip to content

Fix: security fixes & version updates#225

Merged
Teolhyn merged 12 commits into
mainfrom
fix/security-fixes
May 20, 2026
Merged

Fix: security fixes & version updates#225
Teolhyn merged 12 commits into
mainfrom
fix/security-fixes

Conversation

@Teolhyn

@Teolhyn Teolhyn commented May 19, 2026

Copy link
Copy Markdown
Member

Summary of Changes

Updated stellar dependencies to protocol 26 versions. Fixed some security errors and bugs found by AI auditing agent.

Considerations

Related Issue

Author checklist

  1. Does your pull request change contract endpoint?
  • Yes, changes in loan_manager
    • Test was added in loan_manager.rs
  • Yes, changes in loan_pool
    • Test was added in loan_pool.rs
  • No
  1. Does your pull request demand a new deployment of contracts
  • Yes
  • No

Comment thread scripts/util.ts
exe(`stellar keys add ${process.env.SOROBAN_ACCOUNT}`);
exe(`stellar keys rm ${process.env.SOROBAN_ACCOUNT} --force 2>/dev/null || true`);
// --secret-key reads the key from stdin in stellar CLI v26+
console.log(`stellar keys add ${process.env.SOROBAN_ACCOUNT} --secret-key`);

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tätä ajetaan CI:ssä mutta ton secretin arvo muistaakseni on "alice"

Comment thread scripts/util.ts
execSync(`stellar keys add ${process.env.SOROBAN_ACCOUNT} --secret-key`, {
input: process.env.SOROBAN_SECRET_KEY,
stdio: ['pipe', 'inherit', 'inherit'],
});
@Teolhyn Teolhyn requested a review from kovipu May 19, 2026 12:24
@Teolhyn Teolhyn merged commit db3b0ec into main May 20, 2026
7 of 9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants