CodeDecoders
Jira Mirror
ARP

ARP Software

Sprint Delivery Board

AS Sprint 11Jun 3 – Jun 18(58 work items)
4d 1h3w 2h4d

Priority 1 GMR corridor | Fixed Rate Quotation Unified API Credit Utilisation Tracking Priority 2 Mastercard, Travel Rule and Gate | Travel Rule Gate - Sub account feature Improvement Onboarding Priority 3 Platform Improvement...

AS-58Travel Rules: Gate Travel Rule Approach
Travel Rule - Platform Compliance
To Do
8
YS
AS-568Travel Rule - Penny Test to Verify Wallet Address Ownership
Travel Rule - Platform Compliance
To Do
5
YS
AS-814Wallets missing external ID can block withdrawals
CLOSED - NOT REQUIRED
AS-43Migrate Fireblocks to v22
Fireblock Integration
Done
May 27
8
DM
AS-585Allow payout via GPS and withdrawal directly from checkouts
Merchant Checkout & Payment Experience
To Do
5
YS
AS-783Implement B2B payments in India using Digit9
UAT
5
NN
AS-848Maker Checker for Bank Account and Wallet Creation in Client Dashboard
In Review
May 20
5
NN
AS-785Store checkout received amount in request currency (Fiat) and USD equivalents
Done
Apr 22
3
YS
AS-782Revamp fireblocks vault creation and wallet assignment for checkouts4
Merchant Checkout & Payment Experience
Done
Apr 21
5
YS
AS-791Create Backfill Script for Missing Fiat and USD Amounts in Historical Checkout Records
Done
Apr 24
3
YS
AS-658AED integration with Lean payouts [SANDBOX ONLY]
In Review
8
NN
AS-701Client based Quotation Duration
In Review
May 8
5
SP
AS-479Gate Vaults UI/UX Improvements
Merchant Checkout & Payment Experience
Ready for Release
Apr 24
3
YS
AS-548Allow payout via GPS and withdrawal directly from Sub account
Gate Experience & Documentation
In Review
May 22
5
YS
AS-478Sub-accounts15
Gate Experience & Documentation
Ready for Release
Apr 24
13
YS
AS-758Onboarding: UBOs
Client Onboarding & Workspace Lifecycle
In Review
May 1
3
RL
AS-812Auto-fail completed transactions on non-credit claim and cancelled errors
Ready for Release
Apr 28
5
NN
AS-829New branding Visual on login page
Under Development
1
RL
AS-846Fix onboarding flow branch inconsistencies caused by incorrect git actions
CLOSED - NOT REQUIRED
1
RL
AS-864Add error code to transaction response and webhook
CLOSED - NOT REQUIRED
NN
AS-879Implement WA Flows
To Do
May 29
8
HB
AS-884Add OpenTelemetry tracing to all backend services
In Review
3
DM
AS-869Improve Redis Viewer
CLOSED - NOT REQUIRED
3
AS-886Create a OTel config for traces in Grafana
Done
3
G
AS-898Travel Rule Post-Transaction + Initiator Flow Case Handling & Testing
Travel Rule - Platform Compliance
Under Development
YS
AS-909Sync revamped KYC in manual KYC verify/unverify
In Review
1
RL
AS-910Add cicd pipelines to all microservice repositories
CLOSED - NOT REQUIRED
2
G
AS-911PenTest June 2026
Under Development
Jun 20
PM
AS-912[VAPT][Critical] Cross-Org Webhook Transfer via orgId
PenTest June 2026
Ready for Release
HB
AS-913[VAPT][Critical] SSRF via Webhook URL Leading to AWS Instance Metadata Disclosure
PenTest June 2026
Ready for Release
HB
AS-914[VAPT][High] API-Key IP Allowlist Bypass
PenTest June 2026
Ready for Release
HB
AS-916[VAPT][Medium] Maker-Checker Configuration Modifiable by Client Admin
PenTest June 2026
CLOSED - NOT REQUIRED
AS-917[VAPT][Medium] Webhook Signing Secret Tampering
PenTest June 2026
UAT
RL
AS-918[VAPT][Medium] Invitation Endpoint Allows Duplicate Invitations via Race Condition
PenTest June 2026
UAT
NN
AS-921[VAPT][Low] Lack of Global Server-Side Input and Output Validation
PenTest June 2026
CLOSED - NOT REQUIRED
DM
AS-922[VAPT][Low] Bcrypt Password Hash Disclosure via Invitations Endpoint
PenTest June 2026
UAT
J
AS-924[VAPT][Info] Missing Server-Side CSRF Defenses
PenTest June 2026
UAT
NN
AS-925[VAPT][High] Privilege Escalation: Low-Privilege User Can Disable Admin Accounts
PenTest June 2026
Done
HB
AS-926[VAPT][High] Unauthenticated Redis-Viewer Access
PenTest June 2026
Done
HB
AS-919[VAPT][Medium] Publicly Accessible MCP Server
PenTest June 2026
UAT
NN
AS-927[VAPT][Medium] Sensitive Credential Disclosure via Admin Endpoints
PenTest June 2026
UAT
SP
AS-928[VAPT][Medium] Inventory Item Endpoint Accepts Negative Quantities and Rates
PenTest June 2026
UAT
RL
AS-929[VAPT][Medium] Markup Endpoint Accepts Negative Percentages
PenTest June 2026
CLOSED - NOT REQUIRED
AS-930[VAPT][Medium] Admin Permission Catalogue Disclosure to Read-Only Users
PenTest June 2026
UAT
SP
AS-915[VAPT][Medium] Improper Invalidation of Password Reset Tokens
PenTest June 2026
UAT
DM
AS-920[VAPT][Medium] Session Token Remains Valid After Logout
PenTest June 2026
UAT
DM
AS-923[VAPT][Low] Multiple Session Persistence
PenTest June 2026
UAT
DM
AS-932Paymob SAU watchdog misses refunded with fees and VAT status
Done
RS
AS-933Create logs dashboards for staging and prod in grafana
Done
Jun 8
2
G
AS-934Create Dashboards for traces on grafana
Under Development
2
G
AS-935Update Paymob implementation to use sanitized sender details when provided
Done
Jun 18
1
NN
AS-936Use Veripay instead of organization name in Paymob ARE sender fields
To Do
AS-937Fix empty string validation in transaction input and add gender dropdown
Done
Jun 19
2
D
AS-938Integrate Atlas Pay into the system as a GPS partner
To Do
AS-939In partner monitoring page, EzRemit is not showing rate
UAT
Jun 22
2
D
AS-940Coinsph payout executeQuote failures logged as "Unknown error" instead of actual partner error code
UAT
Jun 23
2
D
AS-941ID type and ID number should be mandatory for INR transactions on frontend in GPS
To Do
Jun 23
2
NN
AS-943Upgrade legacy WhatsApp chatbot to gpt-5.4-mini + Responses API (reduce hallucinations)
Under Development
HB