79 bugs found during documentation research, grouped by module. Status: 🔴 not fixed / 🟡 confirmed / 🟢 fixed.
See Indonesian version for full table. Highlights:
- 30
🔴bugs across Order, Wallet, WhatsApp, Live Chat, Broadcast, Contact, Biolink, Shipping, Subscription, Report, Team, Marketing, AI Agent, Digital Store, and Infrastructure - Critical security issues: hardcoded Cloudflare API token, hardcoded Rajaongkir/Apikurir keys,
eval()injection risk, login-as-user with random path as only protection - Critical money-path issues: PIN lock bypass in withdraw, mass update not triggering observer (stock/wallet not updated), inconsistent type/status values
- Inconsistencies: duplicate routes, orphan models, dead code, hardcoded localhost URLs in production paths