ShopChain is a crypto e-commerce dApp where customers pay for orders in USDT. The `PayWith` checkout contract pulls funds from the buyer to the merchant and then marks the order as fulfilled so the warehouse can ship. The team integrated several ERC-20 tokens as accepted payment. Somewhere in the payment flow, an order can be marked paid even when no money actually moved. Review the contracts and find the flaw that lets a buyer check out for free.

QuickJot is a minimalist Android notes app. To power its home-screen widget, the app exposes notes through a ContentProvider that a small companion widget process reads from. The team wanted the widget to support flexible filtering and column selection so the UI could be customised. Review the provider that backs content://com.quickjot.provider/notes and decide whether sharing notes this way is safe.

MediSync is an Android health app that syncs login credentials, lab results, and prescriptions with its backend over HTTPS. After users on certain networks reported connection failures, a developer pushed a quick networking change to "stop the SSL errors" before a release deadline. The build went straight to production. Review the network layer and decide whether patient data is actually protected in transit.

AuthGate is an enterprise SSO gateway that lets corporate customers sign in through their own SAML identity provider. The IdP posts a signed XML assertion stating which employee is logging in, and AuthGate trusts it to create a session across all of that tenant's apps. The response handler verifies a signature and then pulls out the user identity. Review how the signed XML is consumed and decide whether the identity AuthGate trusts is really the one that was signed.

FlowForge is a low-code automation platform where teams build workflows by chaining "actions" together (post to Slack, make an HTTP call, parse a CSV). When a workflow step runs, the engine looks up the action the user picked by name and loads the matching plugin handler on the fly. The plugin system was recently extended to support an upload feature so customers can ship their own handlers. Review the execution path that turns a chosen action into a running handler.

LabPocket is an iOS health app whose Vapor/Fluent backend lets patients pull their lab results into the app. The mobile client calls GET /api/results/:id to render each result card, and the endpoint was shipped fast to make the dashboard feel snappy. Review how the results controller decides which record to hand back to the caller.

CivicLookup is an internal portal that lets municipal staff search citizen records. Authentication is still backed by a legacy directory that was exported from the old HR system as a flat XML file, and staff sign in against it using lxml's XPath engine. Review the authentication flow and figure out whether the login query can be trusted with whatever a user types into the form.