Runtime Verification completed an audit of Band Protocol's Rust implementation of the Band Standard Reference Soroban Smart Contract. This contract enables querying real-world asset prices from BandChain into the Stellar network's Soroban mainnet. The audit identified issues and informative findings, with a detailed report available.
Runtime Verification announced the completion of their audit on Band Protocol's Rust-based Band Standard Reference Soroban Smart Contract, which integrates BandChain's cross-chain data oracle with Stellar's Soroban mainnet. The contract allows Stellar users to query prices of supported assets directly or comparatively, secured by admin-assigned relayers who update storage from BandChain. The 2.5-week manual review involved business logic analysis, formal specifications, testing, and invariant identification, culminating in a report delivered on February 19th, 2024. While a full code fix review was out of scope, a best-effort review was performed. Band Protocol provides decentralized oracle services for DeFi and other applications, and Runtime Verification specializes in formal methods for blockchain security.