Issues

• [flame_manager] Lock-ordering / TOCTOU hazard: CoinManager locked twice, Registry locked inside CoinManager hold

  cube-btc/cube#21 · Filter by author GideonBature opened on Jun 18, 2026

• [privileges_manager] Setter/getter asymmetry: setters ignore ephemeral registrations (cannot configure a just-registered account in one execution)

  cube-btc/cube#20 · Filter by author GideonBature opened on Jun 18, 2026

• [inscriptive] Inconsistent lifecycle contract (delta flush) and endianness across managers

  cube-btc/cube#19 · Filter by author GideonBature opened on Jun 18, 2026

• [registry] Call-counter update can overflow; rank lookups by key are O(n)

  cube-btc/cube#18 · Filter by author GideonBature opened on Jun 18, 2026

• [privileges_manager] PeriodicResource refill add can overflow (no checked arithmetic in fee-metering path)

  cube-btc/cube#17 · Filter by author GideonBature opened on Jun 18, 2026

• [params_manager] Uses std::sync::Mutex while every other manager uses tokio::sync::Mutex (deadlock risk across .await)

  cube-btc/cube#16 · Filter by author GideonBature opened on Jun 18, 2026

• [flame_manager] Blind overwrite of flame vec at a height in apply_changes (memory/disk divergence)

  cube-btc/cube#15 · Filter by author GideonBature opened on Jun 18, 2026

• [inscriptive] Several managers silently swallow sled iteration errors at construction (partial loads)

  cube-btc/cube#14 · Filter by author GideonBature opened on Jun 17, 2026

• [inscriptive] apply_changes is non-atomic and not rollback-safe across all managers

  cube-btc/cube#13 · Filter by author GideonBature opened on Jun 17, 2026

• [flame_manager] Greedy flame selector can emit an unbounded number of flames + sum-loop overflow

  cube-btc/cube#12 · Filter by author GideonBature opened on Jun 17, 2026

• [flame_manager] FlameTier variant names are mislabeled (off by 10x for tiers 3/4/5)

  cube-btc/cube#11 · Filter by author GideonBature opened on Jun 17, 2026

• [coin_manager] Missing overflow protection on account_balance_up / contract_balance_up

  cube-btc/cube#10 · Filter by author GideonBature opened on Jun 16, 2026