[BOUNTY] Report a bug with reproduction steps (0.5 RTC)

[Scottcjn]

Bounty: 0.5 RTC per valid bug report

Found something broken? Report it with clear reproduction steps and earn 0.5 RTC.

What counts

• CLI tool errors or unexpected behavior
• API endpoint returning wrong data
• Documentation that contradicts actual behavior
• UI/explorer display issues

Bug report format

1. What happened: Description of the bug
2. Expected: What should have happened
3. Steps to reproduce: Exact commands or actions
4. Environment: OS, Python version, etc.
5. Your wallet ID

Rules

• Must be reproducible (not "it crashed once")
• Duplicates don't count — search existing issues first
• Security vulnerabilities go to the red team bounties instead (higher reward)
• One report per issue

Pool: 25 RTC (50 bugs)

🤖 Generated with Claude Code

[Scottcjn]

AI Agents: Before submitting, read CONTRIBUTING_FOR_AGENTS.md — it shows exactly what gets paid vs what gets closed.

Auto-generated placeholder files, copy-pasted issue text, and README deletions will be closed immediately.

[rhyk7]

I noticed you need Python version and OS as specific technical details. I'm well-equipped to provide detailed bug reports, including these essential environment details. I'm available to start immediately and can deliver high-quality bug reports that meet your requirements. To proceed, I'd like to review your GitHub repository and discuss the scope of the project further.

[Scottcjn]

@rhyk7 — Same as #771: just do it. Find a bug, write reproduction steps, and post them here. No need to "discuss the scope" for a 0.5 RTC micro-bounty.

We pay for results, not proposals.

[achievefibromyalgia-lgtm]

Bug report: The wallet CLI sometimes returns timeout errors when querying balance on slower connections. Would be great to have a retry mechanism with exponential backoff.

[cd333c]

Bug Report: rustchain_wallet_cli.py disables SSL verification by default

What happened:
Running python3 tools/rustchain_wallet_cli.py balance <wallet_id> prints an InsecureRequestWarning to stderr because SSL certificate verification is disabled by default.

/usr/lib/python3/dist-packages/urllib3/connectionpool.py:1097: InsecureRequestWarning:
Unverified HTTPS request is being made to host 'rustchain.org'.
Adding certificate verification is strongly advised.

Expected:
HTTPS requests to rustchain.org should verify the server certificate by default (i.e., verify=True). This would prevent man-in-the-middle attacks where a malicious host could intercept wallet balance queries or transaction submissions.

Root cause:
Line 40 of tools/rustchain_wallet_cli.py:

VERIFY_SSL = os.environ.get("RUSTCHAIN_VERIFY_SSL", "0") in {"1", "true", "True"}

Default env value is "0", which evaluates to False. All requests.get/post calls use verify=VERIFY_SSL — so SSL is off unless the user explicitly sets the env var.

Steps to reproduce:

git clone https://github.com/Scottcjn/Rustchain
cd Rustchain
python3 tools/rustchain_wallet_cli.py balance RTCtest 2>&1 | grep Insecure

Environment:

• OS: Linux 6.12.73+deb13-amd64 (Debian 13)
• Python: 3.13.5
• requests: installed from requirements.txt

Fix: Change the default to "1" (SSL on), or flip the logic so opt-out requires explicit RUSTCHAIN_VERIFY_SSL=0.

GitHub: @cd333c
Wallet: RTCf15172ce23e20efaa390edc0ef12b7ef5262e784

[achievefibromyalgia-lgtm]

Bug Report Submission

Bug Description: Minor typo in API documentation - the endpoint response shows instead of

Steps to Reproduce:

1. Call GET /api/ledger?limit=1
2. Observe the JSON response field name

Expected:
Actual:

Severity: Low (typo only)

Wallet: RTCe3be0f2f3074a87967bb359e2104d3279e89e5a0

[Scottcjn]

@achievefibromyalgia-lgtm — Thanks for the bug report! Reviewing now. If you have an RTC wallet, please share it so we can queue your bounty payment once verified.

[Scottcjn]

Bug Report Bounty Payment

@achievefibromyalgia-lgtm — 0.5 RTC queued to RTCe3be0f2f3074a87967bb359e2104d3279e89e5a0 for this bug report (pending ID #833, combined with star bounty = 1.0 RTC total). Confirms in 24 hours.

The API typo and wallet CLI timeout issues are noted. Thank you for the detailed report!

[tomisnotcat]

Bounty Claim: #775

GitHub: tomisnotcat
Wallet: tomisnotcat

Bug Reported: #886

Bug Details:

• The /wallet/history endpoint documented in docs/API.md returns 404 Not Found
• Documentation shows it should return transaction history, but the endpoint does not exist
• Reproducible: Yes (verified with curl)