Crowdfunding milestone escrow releases trust a single oracle verification - no quorum or dispute for oracle_verify_milestone

[nanaf6203-bit]

Context: oracle_verify_milestone (contracts/crowdfunding/src/lib.rs ~750) marks a milestone verified based on one caller's assertion (the registered oracle) and the milestone completion path releases the escrowed tranche.

Problem: A single compromised or coerced oracle can green-light a fake milestone and unlock the milestone tranche; there is no multi-signal (independent assessor + oracle) and no challenge window on the release.

Proposed approach: Require oracle + second check (e.g. builder attestation or a second oracle quorum), add a dispute window before tranche release, and emit MilestoneVerified with the verifier list for audits.

Acceptance criteria: single-source verification cannot release funds; challenge path prevents release within the window; tests cover both.

[pimaster900]

@pimaster900 has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

i would like to work on this

ℹ️ Repo Maintainers: To accept this application, review their application or assign @pimaster900 to this issue.

[dragon-983]

@dragon-983 has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hi, I’ve reviewed the requirements and can work through the implementation systematically, including the necessary frontend and backend changes. I’d appreciate the opportunity to contribute.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @dragon-983 to this issue.

[Oladips054]

@Oladips054 has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hello Maintainer, I can fix this please assign

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Oladips054 to this issue.

[laraba9987-cmyk]

@laraba9987-cmyk has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

i would like to work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @laraba9987-cmyk to this issue.

[drips-wave]

Congratulations, @laraba9987-cmyk! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on September 30, 2026.

🧑‍💻 @laraba9987-cmyk: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊