All issues

auth: a decrypted frame is trusted as AUTH_START without checking its inner message type

#353

· userFRM opened

on Jul 30, 2026

tests: the outside-RTH assertions are one-sided, so a path that always sets the flag passes

#352

· userFRM opened

on Jul 30, 2026

auth: the second-factor gate can accept a verdict that predates the code it sent

#351

· userFRM opened

on Jul 30, 2026

python: EClient cannot supply a second-factor code, so an authenticator account cannot log in from Python at all

#350

· userFRM opened

on Jul 30, 2026

orders: a modify silently ignores a changed time-in-force or order type, and the two tests for that behaviour assert nothing about it

#349

· userFRM opened

on Jul 30, 2026

ccp: the ExecID window is 1024 entries, so a replay batch deeper than that double-counts its own head

#344

· userFRM opened

on Jul 29, 2026

orders: a trailing-percent order is rejected at every percentage except exactly 1%, which works by coincidence

#339

· userFRM opened

on Jul 29, 2026

orders: setting displaySize or minQty kills the order — the gateway reports quantity 0 and returns Inactive

#338

· userFRM opened

on Jul 29, 2026

config: a good-till expiry in US/Eastern fails to parse on a default Linux install, and the GTD order goes out with no expiry

#335

· userFRM opened

on Jul 29, 2026

orders: a replace restates almost none of the order — modifying a trailing stop drops its trail and the order goes Inactive

#334

· userFRM opened

on Jul 29, 2026

orders: format_price drops the minus sign for any price between -1 and 0, turning a credit into a debit

#332

· userFRM opened

on Jul 29, 2026

ccp: a duplicate ExecID returns out of the whole execution handler, so a replayed final fill leaves the order open forever

#330

· userFRM opened

on Jul 29, 2026