[Snyk] Upgrade bn.js from 5.2.1 to 5.2.2 - #14

Closed

0xLeathery wants to merge 198 commits into

mainfrom

snyk-upgrade-7cb27effa2e7f4bd5f0cf1bfc369e0af

Commits on Feb 7, 2026

docs: initialize project
Ethan Hurst
committed
20e635d
chore: add project config
Ethan Hurst
committed
6e9fafe
docs: complete project research

Ethan Hurst
and
claude
committed
09cd6c4
docs: create HELIX roadmap and requirements

Ethan Hurst
and
claude
committed
ea59ffd
plan(phase-1): Anchor program scaffold with Token-2022 mint and GlobalState

Ethan Hurst
and
claude
committed
b682c12
plan(phase-1): Bankrun test suite for initialize instruction

Ethan Hurst
and
claude
committed
274e8a0
docs(phase-1): update roadmap with Phase 1 plan details

Ethan Hurst
and
claude
committed
3f134e9
docs(phase-1): capture board review advisory notes

Ethan Hurst
and
claude
committed
e055117
chore(01-01): initialize Anchor project scaffold with Token-2022 dependencies

Ethan Hurst
and
claude
committed
e73a2e9
feat(01-01): implement constants, errors, events, and GlobalState account

Ethan Hurst
and
claude
committed
81a3445
feat(01-01): implement Initialize instruction with Token-2022 mint and GlobalState

Ethan Hurst
and
claude
committed
8b4c833
fix(01-01): resolve Anchor 0.31 build issues

Ethan Hurst
and
claude
committed
3d8a0f2
chore: add gitignore and Phase 1 research doc

Ethan Hurst
and
claude
committed
931dfc8
docs(01-01): complete Anchor scaffold plan

Ethan Hurst
and
claude
committed
6614087
test(01-02): add Bankrun test utilities and helpers
Ethan Hurst
committed
6ab3589
feat(01-02): complete Bankrun test suite with Token-2022 mint

Ethan Hurst
and
claude
committed
09569b8
docs(01-02): complete Bankrun test suite plan

Ethan Hurst
and
claude
committed
d18c557
docs(01): complete Foundation and Token Infrastructure phase

Ethan Hurst
and
claude
committed
14d21c3
docs(02): create phase plan

Ethan Hurst
and
claude
committed
95f9f3e
chore(01): cleanup token constants and add error variant

Ethan Hurst
and
claude
committed
be6b2c9
feat(02-01): add staking constants, errors, events, and StakeAccount PDA
Ethan Hurst
committed
511092d
feat(02-01): implement math module with bonus curves, penalty calculations, and reward helpers
Ethan Hurst
committed
9d886c3
docs(02-01): complete Types and Math foundation plan
Ethan Hurst
committed
d07307b
feat(02-02): implement create_stake instruction

Ethan Hurst
and
claude
committed
b90f69a
feat(02-02): implement crank_distribution instruction

Ethan Hurst
and
claude
committed
7f0217f
docs(02-02): complete create_stake and crank_distribution plan
Ethan Hurst
committed
bfd1a56
feat(02-03): implement unstake instruction with penalty enforcement
Ethan Hurst
committed
aae7279
feat(02-03): implement claim_rewards instruction
Ethan Hurst
committed
ae54980
docs(02-03): complete unstake and claim_rewards plan
Ethan Hurst
committed
a30a6a8
test(02-04): add create_stake and crank_distribution Bankrun tests

Ethan Hurst
and
claude
committed
03abb64
test(02-04): add unstake and claimRewards Bankrun tests
Ethan Hurst
committed
2325fe5
docs(02-04): complete Bankrun test suite plan
Ethan Hurst
committed
ce273f0
docs(02): complete Phase 2 Core Staking Mechanics

Ethan Hurst
and
claude
committed
bd5eed5
feat(02.1-01): add mul_div helpers and fix BPB bonus cap
Ethan Hurst
committed
542825d
fix(02.1-01): fix penalty calculations to round UP and hit 100% at day 365
Ethan Hurst
committed
b3bfcef
fix(02.1-01): fix reward calculation precision and inflation formula
Ethan Hurst
committed
e4faabb
feat(02.1-01): add penalty redistribution to remaining stakers
Ethan Hurst
committed
5b4a977
feat(02.1-01): add admin_mint event and cap enforcement
Ethan Hurst
committed
20fa9b6
feat(02.1-01): emit days_elapsed in InflationDistributed event
Ethan Hurst
committed
3707c1e
test(02.1-01): update tests for math fixes
Ethan Hurst
committed
12e0f63
docs(02.1-01): complete Critical Math Fixes plan
Ethan Hurst
committed
8fd4d6c
docs(02.1): complete Critical Math Fixes phase

Ethan Hurst
and
claude
committed
3ca1b2d
docs(03): capture Phase 3 context from expert board consensus

Ethan Hurst
and
claude
committed
d84f2db
feat(03-01): add claim constants and error codes
Ethan Hurst
committed
c851385
feat(03-02): extend StakeAccount with BPD tracking fields
Ethan Hurst
committed
2bdce1c
feat(03-01): add claim events and ClaimConfig/ClaimStatus PDAs
Ethan Hurst
committed
71e3ad0
feat(03-02): add lazy migration and BPD payout to claim_rewards
Ethan Hurst
committed
d7ded64
feat(03-02): initialize BPD fields in create_stake
Ethan Hurst
committed
1308dd4
docs(03-01): complete Claim Foundations plan
Ethan Hurst
committed
d30ed1c
docs(03-02): complete Extend StakeAccount for BPD plan
Ethan Hurst
committed
8d0fbbd
chore(03-03): add solana-nostd-keccak dependency for Merkle proof verification

Ethan Hurst
and
claude
committed
1ae484d
feat(03-05): implement initialize_claim_period admin instruction

Ethan Hurst
and
claude
committed
6ee2dcb
feat(03-04): implement withdraw_vested instruction

Ethan Hurst
and
claude
committed
7507fd9
feat(03-04): implement trigger_big_pay_day instruction

Ethan Hurst
and
claude
committed
0494e1d
feat(03-03): implement free_claim instruction with Merkle + Ed25519 verification

Ethan Hurst
and
claude
committed
9289ed4
feat(03-04): register withdraw_vested and trigger_big_pay_day

Ethan Hurst
and
claude
committed
7d681a6
docs(03-05): complete Initialize Claim Period plan

Ethan Hurst
and
claude
committed
20df4cb
feat(03-03): register free_claim instruction in mod.rs and lib.rs

Ethan Hurst
and
claude
committed
605e376
docs(03-04): complete Withdraw Vested and Big Pay Day plan

Ethan Hurst
and
claude
committed
9d9917b
docs(03-03): complete Free Claim Instruction plan

Ethan Hurst
and
claude
committed
5befbec
feat(03-06): add Phase 3 test utilities with Merkle and Ed25519 helpers
Ethan Hurst
committed
a84a1d4
test(03-06): add initializeClaim (5) and freeClaim (14) tests
Ethan Hurst
committed
43bf583
test(03-06): add withdrawVested (8) and migration (8) tests
Ethan Hurst
committed
657966a
test(03-06): add triggerBpd tests (8 tests)
Ethan Hurst
committed
0c8991e
docs(03-06): complete Bankrun Test Suite plan

Ethan Hurst
and
claude
committed
c1523ad
fix(security): require claimer equals snapshot_wallet in free_claim

Ethan Hurst
and
claude
committed
0219442
fix(security): add ownership and PDA validation in trigger_big_pay_day

Ethan Hurst
and
claude
committed
6a0e5da
fix(bpd): set eligibility in create_stake when claim period active

Ethan Hurst
and
claude
committed
b1ca9ac
docs(03.2): create phase plan for BPD security critical fixes
Ethan Hurst
committed
ee7babe

Commits on Feb 8, 2026

feat(state): expand StakeAccount and ClaimConfig for BPD rate pre-calculation

Ethan Hurst
and
claude
committed
9148ce0
feat(bpd): implement finalize_bpd_calculation instruction for rate pre-calculation

Ethan Hurst
and
claude
committed
7963e90
docs(03.2-01): complete plan execution summary and update project state

Ethan Hurst
and
claude
committed
cd546ce
fix(bpd): use pre-calculated rate and add duplicate prevention in trigger_big_pay_day

Ethan Hurst
and
claude
committed
666740d
test(bpd): update tests for two-phase flow and add security tests

Ethan Hurst
and
claude
committed
0ac8822
docs(03.2-02): complete phase 3.2 with SUMMARY and STATE updates

Ethan Hurst
and
claude
committed
53a5e7f
docs(phase-3.2): complete phase execution — verification passed

Ethan Hurst
and
claude
committed
d44b226
docs(03.3): create phase plan — 4 plans in 3 waves for post-audit security hardening
Ethan Hurst
committed
4751438
feat(03.3-01): expand state structs + add Phase 3.3 error codes + MED-5 validation
Ethan Hurst
committed
133993d
feat(03.3-01): create seal_bpd_finalize instruction and register in program
Ethan Hurst
committed
5ef361d
docs(03.3-01): complete state expansion and foundation plan
Ethan Hurst
committed
621755a
fix(03.3-02): harden finalize_bpd_calculation with per-stake tracking and BPD window
Ethan Hurst
committed
ef0b787
fix(03.3-03): implement arithmetic safety fixes (HIGH-1, MED-2, ADDL-1/2/3)
Ethan Hurst
committed
76f43f8
fix(03.3-03): implement CEI pattern and stake migration (MED-6, MED-8)
Ethan Hurst
committed
f754ba7
docs(03.3-03): complete arithmetic safety and CEI hardening plan
Ethan Hurst
committed
90bc91f
fix(03.3-02): harden trigger_big_pay_day + unstake with counter-based completion and BPD window
Ethan Hurst
committed
af44575
docs(03.3-02): complete BPD Distribution Hardening plan
Ethan Hurst
committed
b4d314b
test(03.3-04): update BPD tests for three-phase flow with seal step
Ethan Hurst
committed
e019c0e
test(03.3-04): add Phase 3.3 security hardening test suite
Ethan Hurst
committed
d97c04e
docs(03.3-04): complete Security Hardening Test Suite plan
Ethan Hurst
committed
fd26fdc
fix(tests): fix triggerBpd test PDA derivation and flow issues
Ethan Hurst
committed
7569fd2
fix(03.3-04): fix test failures in BPD and security test suites

Ethan Hurst
and
claude
committed
e0c562f
fix(03.3): reward_debt overflow protection + ROADMAP status update

Ethan Hurst
and
claude
committed
ae1de8c
docs(phase-3.3): complete phase execution — verification passed

Ethan Hurst
and
claude
committed
813079d
docs(04): capture phase context from expert panel
Ethan Hurst
committed
f729256
docs(04): research phase domain
Ethan Hurst
committed
17267a6
docs(04): create phase plan — 5 plans in 3 waves
Ethan Hurst
committed
62c9b2d
feat(04-01): scaffold Next.js 14 project with Solana wallet, CSP, and RPC proxy
Ethan Hurst
committed
030acb9
feat(04-01): add UI primitives, Solana constants, IDL copy, and PDA helpers
Ethan Hurst
committed
09eba84
docs(04-01): complete scaffold and wallet integration plan
Ethan Hurst
committed
498a2c3
feat(04-02): add React Query hooks, math module, and format utilities

Ethan Hurst
and
claude
committed
be00241
feat(04-02): add dashboard layout, protocol stats, portfolio summary, and stakes list

Ethan Hurst
and
claude
committed
eaaaeb3
docs(04-02): complete dashboard and hooks plan
Ethan Hurst
committed
b4c3338
feat(04-03): Zustand wizard store, bonus preview, and create stake mutation

Ethan Hurst
and
claude
committed
3cf1e4c
feat(04-04): add unstake, claim rewards, and current slot hooks

Ethan Hurst
and
claude
committed
a439307
feat(04-03): 3-step stake wizard with success screen

Ethan Hurst
and
claude
committed
fb2c7cf
feat(04-04): add stake detail page with penalty calculator and unstake

Ethan Hurst
and
claude
committed
8560d5c
docs(04-03): complete stake wizard plan

Ethan Hurst
and
claude
committed
8690915
docs(04-04): complete penalty calculator and unstake plan
Ethan Hurst
committed
bda3043
feat(04-05): implement free claim flow with Ed25519 verification
Ethan Hurst
committed
8b267e8
feat(04-05): add rewards page, BPD status, and crank button
Ethan Hurst
committed
e34b469
feat(04-05): add accessibility and mobile polish
Ethan Hurst
committed
af6e511
docs(04-05): complete free claim, BPD status, and mobile polish plan
Ethan Hurst
committed
db03b8e
docs(05): research light indexer service domain
Ethan Hurst
committed
c3db04c
docs(05): create phase plan
Ethan Hurst
committed
368a9b8
chore(05-01): scaffold indexer project with dependencies and configuration

Ethan Hurst
and
claude
committed
03cb622
feat(05-01): add Drizzle schema, database client, RPC wrapper, Anchor decoder, and event types

Ethan Hurst
and
claude
committed
7c99ff6
docs(05-01): complete indexer infrastructure scaffold

Ethan Hurst
and
claude
committed
3091928
feat(05-02): implement checkpoint management, signature poller, and event decoder
Ethan Hurst
committed
02742ac
feat(05-03): create Fastify server with health check and aggregate stats endpoints
Ethan Hurst
committed
52a98be
feat(05-02): implement event processor and worker entrypoint with polling loop
Ethan Hurst
committed
d9f9cfe
feat(05-03): create distribution, stake, and claim history endpoints
Ethan Hurst
committed
1a7f76f
docs(05-02): complete polling worker implementation
Ethan Hurst
committed
4b98d49
docs(05-03): complete REST API implementation
Ethan Hurst
committed
d9fa514
docs(phase-05): complete phase execution

Ethan Hurst
and
claude
committed
f0f8332
docs(07): research leaderboard and marketing site domain
Ethan Hurst
committed
c9ce624
docs(07): create phase plan
Ethan Hurst
committed
2598c09
feat(07-01): create leaderboard and whale activity indexer endpoints

Ethan Hurst
and
claude
committed
6132f9c
feat(07-01): add leaderboard and whale activity API client types and functions

Ethan Hurst
and
claude
committed
45226f3
feat(07-03): create public route group layout with navigation and footer

Ethan Hurst
and
claude
committed
44bf356
docs(07-01): create SUMMARY.md and update STATE.md

Ethan Hurst
and
claude
committed
55138a8
feat(07-03): create marketing landing page with hero, features, mechanics, and CTA

Ethan Hurst
and
claude
committed
b144f69
feat(07-03): create How It Works and Tokenomics pages

Ethan Hurst
and
claude
committed
a3f60b6
docs(07-03): complete marketing site plan

Ethan Hurst
and
claude
committed
e9bea07
feat(07-02): create leaderboard and whale tracker components and pages

Ethan Hurst
and
claude
committed
41ad1f0
feat(07-02): add leaderboard and whale tracker to dashboard navigation

Ethan Hurst
and
claude
committed
ea907fe
docs(07-02): complete plan execution with summary and state updates

Ethan Hurst
and
claude
committed
427b998
docs(phase-07): complete phase execution

Ethan Hurst
and
claude
committed
dfe41ee
docs(08): research testing, audit, and mainnet deployment
Ethan Hurst
committed
3a560c2
feat: complete Phase 6 - Analytics Dashboard & Jupiter Integration
Ethan Hurst
committed
d3c1335
docs(08): create phase plan
Ethan Hurst
committed
cfcea92
fix(08): revise plans based on checker feedback
Ethan Hurst
committed
3be1e2a
feat(test): install vitest and configure test runner

Ethan Hurst
and
claude
committed
0309447
fix(phase-08-02): add HIGH-1 emergency BPD abort + HIGH-2 seal coverage check

Ethan Hurst
and
claude
committed
4a4afe0
docs(phase-08-02): verify CRIT-1 and MED-1 already fixed

Ethan Hurst
and
claude
committed
9007392
feat(test): migrate all test syntax from mocha/chai to vitest

Ethan Hurst
and
claude
committed
712f4ce
docs(phase-08-02): complete plan with summary and state updates

Ethan Hurst
and
claude
committed
5bf36ad
docs(08-01): complete test runner migration with summary and state updates

Ethan Hurst
and
claude
committed
9597304
test(phase-08-03): add comprehensive security fixes tests for CRIT-1, HIGH-1, HIGH-2, MED-1

Ethan Hurst
and
claude
committed
dc5096d
docs(phase-08-03): partial completion summary and state update

Ethan Hurst
and
claude
committed
028b6ba
docs(phase-08-03): complete security testing and 7-agent audit

Ethan Hurst
and
claude
committed
6059232

Commits on Feb 9, 2026

Add comprehensive documentation for tokenomics engine, including constants, inflation distribution, T-Share calculations, and penalty system
Ethan Hurst
committed
244d6f3
Add security audit report for BPD Finalize Phase (Feb 9, 2026)
Ethan Hurst
committed
de2fd35
Add comprehensive operational runbook, validation report, and tokenomics documentation review
Ethan Hurst
committed
bf70a96
feat: update configuration files with position and context node attributes
Ethan Hurst
committed
84aaa50
feat: implement authority transfer cancellation and BPD window checks
Ethan Hurst
committed
9a4c3e9
chore: add xray static analysis script and ignore .xray directory
Ethan Hurst
committed
2c635b9
Implement structural updates and optimizations across multiple modules
Ethan Hurst
committed
225ff8b
plan(08.1): game theory hardening — loyalty multiplier, anti-whale, audit fixes, BPD transparency
Ethan Hurst
committed
0d6116e
audit: add 4 specialized review teams (runtime, MEV, ops, user-facing)
Ethan Hurst
committed
b9cf5a5
plan: Phase 8.2 - Operational Hardening (5 plans from 4 audit teams)
Ethan Hurst
committed
a5a73a5
audit: add runtime team consolidated report
Ethan Hurst
committed
e060148
Add tests for Game Theory Hardening in Phase 8.1
Ethan Hurst
committed
69e82ed

Commits on Feb 10, 2026

fix(8.1): resolve 3 remaining test failures, update STATE.md
Ethan Hurst
committed
300752b
feat(audit): add Phase 8.1 complete audit report and summary
Ethan Hurst
committed
25dc4bb
feat: Add comprehensive task template for feature implementation
Ethan Hurst
committed
67ab2de
feat: add speckit agents for project management workflow
Ethan Hurst
committed
c08e01f

Commits on Feb 11, 2026

Add Module 6: Big Pay Day (BPD) Distribution System and Module 7: Free Claim System
Ethan Hurst
committed
d452f00
Refactor claim guard tests to ensure non-zero rewards after inflation
Ethan Hurst
committed
a89e463
feat(docker): add initial tasks for Docker localnet testing environment
Ethan Hurst
committed
4abece4
feat(docker): update Docker localnet testing environment specifications and tasks
Ethan Hurst
committed
f94aeba
feat(docker): add Helix Localnet Docker setup with validator and bootstrap script
Ethan Hurst
committed
2b47c4b
Fix stale share_rate exploit by updating global state before critical instructions

google-labs-jules[bot]
and
0xLeathery
committed
ee19135
Merge pull request #1 from ethan-hurst/fix-stale-share-rate-exploit-11383537847469153463
0xLeathery
authored
4df4a5a
Fix CRITICAL bug in pending rewards calculation.

google-labs-jules[bot]
and
0xLeathery
committed
f2d980a
Merge pull request #2 from ethan-hurst/fix-rewards-precision-bug-13667709943351071999
0xLeathery
authored
be81229
feat(security): create validation module with PDA validation function

Ethan Hurst
and
ampagent
committed
13e7487
refactor(pda): use validation function in trigger_big_pay_day

Ethan Hurst
and
ampagent
committed
5d40944
refactor(pda): use validation function in finalize_bpd_calculation

Ethan Hurst
and
ampagent
committed
424c09c
fix(math): explicit overflow checks in mul_div_up for ceiling division

Ethan Hurst
and
ampagent
committed
6935b8b
fix(error-handling): explicit validation for slots_per_day division in trigger_bpd

Ethan Hurst
and
ampagent
committed
13cfe19
fix(error-handling): explicit validation for slots_per_day division in finalize_bpd

Ethan Hurst
and
ampagent
committed
2a0dc30
docs(security): add security patterns and audit documentation

Ethan Hurst
and
ampagent
committed
5c885fa
docs(verification): document test results after security fixes

Ethan Hurst
and
ampagent
committed
d2eb6cf
fix(error-handling): remove unwrap_or(0) from calculate_loyalty_bonus for consistency

Ethan Hurst
and
ampagent
committed
43c20d8
docs(audit): final security audit summary - all critical issues fixed

Ethan Hurst
and
ampagent
committed
f0ac324
docs(tools): comprehensive automated security & code quality tools assessment

Ethan Hurst
and
ampagent
committed
08b4e7b
fix(clippy): remove needless Ok wrapper in calculate_bpb_bonus

Ethan Hurst
and
ampagent
committed
daf61c1
docs(tools): quick reference guide for Clippy and Cargo Audit

Ethan Hurst
and
ampagent
committed
8551c35
ci: add GitHub Actions workflow for security & code quality checks

Ethan Hurst
and
ampagent
committed
0a5dc0e
Add comprehensive review brief for HELIX Staking Protocol audit
Ethan Hurst
committed
c0b6fd7
docs(summary): complete tooling setup documentation

Ethan Hurst
and
ampagent
committed
91c18dd
Merge pull request #5 from ethan-hurst/002-docker-localnet-testing
0xLeathery
authored
2686b61
docs: comprehensive thread summary - security review complete

Ethan Hurst
and
ampagent
committed
70ad9ba
fix: enable verifiable builds with Anchor 0.32.1 and fix Docker COPY paths

Ethan Hurst
and
ampagent
committed
74c5360

Commits on Feb 16, 2026

MAESTRO: Complete codebase review and build shared audit context block

Ethan Hurst
and
claude
committed
241980d
MAESTRO: Complete Phase 01 seven-agent parallel security audit

Ethan Hurst
and
claude
committed
238d5ef
MAESTRO: Complete test coverage baseline analysis for HELIX Staking Protocol

Ethan Hurst
and
claude
committed
3adff29

Commits on Feb 17, 2026

fix: upgrade bn.js from 5.2.1 to 5.2.2
snyk-bot
committed
d1d97d3