Lumen Loop
All news
Articlecertora.comShane Runquist, Chandrakana Nandi8mo ago

Insights from Certora’s first contests for securing Rust smart contracts

Certora organized the first formal verification contests for Rust-based Soroban smart contracts on Stellar, partnering with Code4rena and Cantina. The contests for Blend v2 and Aquarius protocols featured a 40,000 USDC prize pool and used mutation testing to evaluate specifications. They demonstrated the effectiveness of Certora's Sunbeam prover in securing DeFi protocols on Stellar.

SecuritySmart ContractsSoroban
Lumen Loop's take

Certora hosted two pioneering formal verification contests for Soroban smart contracts on the Stellar blockchain, targeting Rust code with their open-source Prover and Sunbeam tool. The first contest with Code4rena audited Blend v2's Backstop contract, while the second with Cantina covered Aquarius's fees_collector and access_control contracts. Participants wrote CVLR specifications to prove security properties, evaluated via mutation testing with tools like universalmutator. Over 2,600 rules were created across 47 participants, catching mutants and real vulnerabilities, with top performers earning significant rewards. The contests highlighted formal verification's role in securing Stellar DeFi protocols like lending pools and liquidity management.

Mentioned projects
5 projects linked
A
AquariusFinancial Protocols
SCFAudited
DEXDeFi

Aquarius is a liquidity layer designed to incentivize market-making and liquidity provision on the Stellar network's native dece…

View →
B
Blend CapitalFinancial Protocols
SCFAudited
DeFiLending & BorrowingLiquidity

Blend is a decentralized finance (DeFi) protocol built on Stellar's Soroban smart contract platform, enabling users, DAOs, and i…

View →
C
CantinaInfrastructure & Services
SecurityAuditing

Web3 security platform providing smart contract audits, bug bounties, security competitions, and managed detection services.

View →
C
CertoraInfrastructure & Services
SecurityAuditingFormal Verification

Formal verification tools and smart contract audits that identify vulnerabilities with mathematical certainty.

View →
C
Code4rena
SecurityAuditing

Top auditors compete to keep high severity bugs out of production. Start a public or private audit within 48 hours.

View →