Issues

• [Contracts][Bug] panic!()/unwrap() in production contract code paths

  bugcontracts
  AetherEdu/AetherMint#473 · Filter by author Penielka opened on Aug 23, 2026
  3

• [Frontend][Tech-debt] Env var sprawl and mismatched defaults — NEXT_PUBLIC_BACKEND_URL points at port 5000 while the backend defaults to 3001

  frontendGrantFox OSSMaybe Rewardedtech-debtThird Campaign
  AetherEdu/AetherMint#472 · Filter by author Penielka opened on Aug 23, 2026
  2

  

• [Backend][Tech-debt] ~60 @ts-ignore comments defeat type safety across the backend

  backendGrantFox OSSMaybe Rewardedtech-debtThird Campaign
  AetherEdu/AetherMint#469 · Filter by author Penielka opened on Aug 23, 2026
  2

  

• [Frontend][Tech-debt] Debug console.log statements left in production components

  frontendtech-debt
  AetherEdu/AetherMint#468 · Filter by author Penielka opened on Aug 23, 2026
  3

• [Frontend][Tech-debt] Legacy pages/ router coexists with the new app/ router — dual routing systems

  frontendtech-debt
  AetherEdu/AetherMint#467 · Filter by author Penielka opened on Aug 23, 2026
  4

• [Frontend][Tech-debt] Demo page shipped as a production route (/demo)

  frontendtech-debt
  AetherEdu/AetherMint#466 · Filter by author Penielka opened on Aug 23, 2026
  1

• [Frontend][Bug] Test-enrollment harness shipped as a production route; can post fake payment data

  bugfrontend
  AetherEdu/AetherMint#465 · Filter by author Penielka opened on Aug 23, 2026
  2

• [Frontend][Tech-debt] Debug test scaffolding committed into src/ root (test-fixes.tsx, test-profile.tsx, final-check.tsx)

  frontendtech-debt
  AetherEdu/AetherMint#464 · Filter by author Penielka opened on Aug 23, 2026
  2

• [Backend][Tech-debt] Background job handlers are no-op stubs that mark work complete without doing it

  backendbugtech-debt
  AetherEdu/AetherMint#463 · Filter by author Penielka opened on Aug 23, 2026
  1

• [Backend][Tech-debt] Two competing migration systems with inconsistent env flags

  backendtech-debt
  AetherEdu/AetherMint#462 · Filter by author Penielka opened on Aug 23, 2026
  1

• [Backend][Bug] /api/v1/transactions is missing the idempotency middleware applied to /api/transactions

  backendbug
  AetherEdu/AetherMint#461 · Filter by author Penielka opened on Aug 23, 2026
  1

• [Backend][Tech-debt] API version endpoint advertises deprecation of /api/* routes that are still fully served, with an already-past deprecation date

  backendbugtech-debt
  AetherEdu/AetherMint#460 · Filter by author Penielka opened on Aug 23, 2026
  2

• [Backend][Bug] Plagiarism analytics and report endpoints return hardcoded fabricated data

  backendbug
  AetherEdu/AetherMint#459 · Filter by author Penielka opened on Aug 23, 2026
  1

• [Backend][Bug] loadRoute swallows route-load failures and mounts empty routers — routes can silently disappear in production

  backendbugtech-debt
  AetherEdu/AetherMint#458 · Filter by author Penielka opened on Aug 23, 2026
  1

• [Backend][Bug] Case-mismatched controller imports silently disable enrollment and payment routes on Linux

  backendbug
  AetherEdu/AetherMint#457 · Filter by author Penielka opened on Aug 23, 2026
  1

• [Backend][Bug] Dead API routes: controllers referenced by routes don't exist (vrf, cross-protocol-bridge, time-lock)

  backendbug
  AetherEdu/AetherMint#456 · Filter by author Penielka opened on Aug 23, 2026
  1

• [Backend][Bug] Consciousness endpoints fabricate blockchain results — every operation 'succeeds' with no chain interaction

  backendbug
  AetherEdu/AetherMint#455 · Filter by author Penielka opened on Aug 23, 2026
  1

• [Frontend][Security] Wallet integration is silently stubbed — getAddress returns a fake key and signTransaction returns unsigned XDR

  bugfrontendhigh-prioritysecurity
  AetherEdu/AetherMint#454 · Filter by author Penielka opened on Aug 23, 2026
  1

• [Backend][Security] Proctoring data encrypted with deprecated password-based createCipher and hardcoded fallback secret

  backendbugsecurity
  AetherEdu/AetherMint#453 · Filter by author Penielka opened on Aug 23, 2026
  1

• [Backend][Security] CSP is only ever report-only by default and is never enforced

  backendbugsecurity
  AetherEdu/AetherMint#452 · Filter by author Penielka opened on Aug 23, 2026
  1

• [Backend][Security] CORS is wide open — app.use(cors()) allows any origin

  backendbugsecurity
  AetherEdu/AetherMint#451 · Filter by author Penielka opened on Aug 23, 2026
  1

• [Backend][Security] JWT tokens signed with hardcoded fallback secret when JWT_SECRET is unset

  backendbughigh-prioritysecurity
  AetherEdu/AetherMint#450 · Filter by author Penielka opened on Aug 23, 2026
  1

• [Frontend] Discussion forums and per-course Q&A

  GrantFox OSSMaybe RewardedThird Campaign
  AetherEdu/AetherMint#420 · Filter by author Penielka opened on Aug 15, 2026
  3

  

• [Backend] End-to-end encrypted credential attachments

  GrantFox OSSMaybe RewardedThird Campaign
  AetherEdu/AetherMint#410 · Filter by author Penielka opened on Aug 15, 2026
  2

  

• [Backend] CRDT conflict-free collaborative editing

  GrantFox OSSMaybe RewardedThird Campaign
  AetherEdu/AetherMint#404 · Filter by author Penielka opened on Aug 15, 2026
  2