Issues

• nativeToChainDriverProfile throws generic unmapped Error when simulateReadCall returns null for unindexed drivers

  backendbug
  fanilabs/backend#470 · Filter by author dev-fani opened on Oct 14, 2026

• deleteOlderThan executes unbounded for-loop without iteration limit risking stalled BullMQ worker jobs

  backendbugdevopsreliabilityvalidation
  fanilabs/backend#469 · Filter by author dev-fani opened on Oct 14, 2026

• combine128 and i128ToScVal lack input bounds checks and test coverage for 128-bit boundary values

  backendenhancementtestingvalidation
  fanilabs/backend#468 · Filter by author dev-fani opened on Oct 14, 2026

• Relations from Escrow and Dispute to Delivery lack explicit onDelete behavior causing integrity ambiguities

  backendcienhancement
  fanilabs/backend#466 · Filter by author dev-fani opened on Oct 14, 2026

• BlockchainCheckpoint model lacks createdAt timestamp recording only updatedAt

  backendenhancement
  fanilabs/backend#465 · Filter by author dev-fani opened on Oct 14, 2026

• Audit log pagination executes unpaged count query on every request causing table scan degradation

  backenddatabaseenhancementobservability
  fanilabs/backend#464 · Filter by author dev-fani opened on Oct 14, 2026

• authenticate guard uses case-sensitive startsWith Bearer rejecting standard RFC 6750 lowercase bearer tokens

  authenticationbackendbugsecurity
  fanilabs/backend#463 · Filter by author dev-fani opened on Oct 14, 2026

• evidenceHash regex rejects uppercase hexadecimal characters from standard SHA-256 tools

  backendcienhancementvalidation
  fanilabs/backend#462 · Filter by author dev-fani opened on Oct 14, 2026

• getLegacyDeliveriesCompleted throws raw Error when simulateReadCall returns null for non-existent profiles

  backendbug
  fanilabs/backend#461 · Filter by author dev-fani opened on Oct 14, 2026

• Global Fastify bodyLimit configuration exposes auth and user endpoints to memory exhaustion attacks

  apiauthenticationbackendenhancement
  fanilabs/backend#460 · Filter by author dev-fani opened on Oct 14, 2026

• GET /users/me registers duplicate authenticate hooks on both onRequest and preHandler

  authenticationbackendenhancement
  fanilabs/backend#459 · Filter by author dev-fani opened on Oct 14, 2026

• executeShutdownSteps executes app.close and closeAllQueues without timeout blocking server teardown

  backendenhancementreliability
  fanilabs/backend#458 · Filter by author dev-fani opened on Oct 14, 2026

• Persisted SMS and PUSH notification records are permanently marked FAILED immediately without queue routing

  backendenhancement
  fanilabs/backend#457 · Filter by author dev-fani opened on Oct 14, 2026