Repository navigation
[CRITICAL] No pause/circuit-breaker mechanism — cannot halt system in emergency #171
Description
Summary
None of the four contracts (prediction_market, pulse_token, referral_registry, leaderboard) implement an emergency pause or circuit-breaker. If a vulnerability is discovered or a dependency is compromised, there is no way to halt risk-creating operations until a code fix is deployed.
Impact
- During an active exploit, new bets, mints, and referrals continue to flow in, amplifying losses.
- Users cannot exit safely —
cancel_refundandclaimmay depend on compromised state. - The only mitigation is an upgrade, which itself requires an admin key (see issue: arbitrary WASM replacement).
Fix
- Add a
Pausabletrait to every contract with aset_paused(bool)admin entry point. - Block all state-mutating entry points while paused:
place_bet,create_market,resolve_market,cancel_market,mint,transfer,burn,register_referral,credit. - Keep read-only and recovery paths open:
balance,total_supply,get_payout,claim(so users can still exit). - Emit a
Paused/Unpausedevent for off-chain monitoring.
Activity
Killerjunior commentedon Aug 23, 2026
Hi maintainer, I have read and understood the issue requirements and checked the necessary documentation. I’m confident I can work on this task effectively and deliver a proper solution.
Samaro1 commentedon Aug 23, 2026
Gm gm boss. I would like to take this one on. I can add a Pausable trait with a set_paused admin entry point to each of the four contracts, block the listed state-mutating entrypoints while paused while keeping balance, total_supply, get_payout, and claim open so users can still exit, and emit the Paused/Unpaused events for off-chain monitoring. Please assign it to me.
grantfox-oss commentedon Aug 23, 2026
🦊 GrantFox — @Killerjunior has been assigned to this issue as part of the Third Campaign campaign!
Next steps:
Closes #171)Good luck! Track your progress on GrantFox.
grantfox-oss commentedon Aug 30, 2026
🎉 This issue has been marked as completed on GrantFox!
@Killerjunior's PR #199 was approved and merged by @Muyideen-js.
🏆 @Killerjunior: You earned 45 FoxPoints for this contribution! Your current tier: Specialist (3,248 total points). Track your full progress on GrantFox.
👏 Great work, @Killerjunior! Keep contributing to SPulse-Org.
feat: implement emergency pause circuit breaker mechanism across all …