Stellar Ecosystem
News

Certora Prover Version 8.1.0 introduces breaking changes including minimum Java 19 and Python 3.9 requirements, default sanity checks, updated requireInvariant semantics, and dedicated commands for Solana and Soroban verifications. New features include CVL formatter, re-routing summaries, transient storage hooks, and Foundry remappings support. Users must review specs and workflows before upgrading.

In Q2 2025, human.tech expanded its identity and privacy infrastructure across three product lines. Human Passport launched on Base with model-based Sybil detection. Human Wallet entered beta with a browser extension and cross-chain gas tank. Human Network grew to 27 nodes securing $3.4B in restaked assets. Most notably, the foundation secured a Stellar Community Fund grant for WhatsApp-based instant payments and global offramps.

AirGap has integrated full Stellar support into its air-gapped cold wallet solution, enabling users to send, receive, and manage XLM and Stellar tokens while keeping private keys completely offline. The integration includes multi-signature account support, advanced security features like dice roll entropy and social recovery, and is being celebrated with a 30% discount promotion.

human.tech integrates privacy-preserving identity tools like Human ID, Human Passport, and Human Wallet with the Stellar blockchain to verify humans, simplify onboarding, and enable compliance. These zero-knowledge proof-based solutions address identity gaps for the unbanked, enhancing Stellar's applications in remittances, humanitarian aid, and tokenized assets. Supported by Stellar's Community Fund, the tools are now live and rolling out progressively.

This article provides a deep technical exploration of Federated Byzantine Agreement (FBA), the consensus mechanism used by Stellar and Ripple, contrasting it with Proof-of-Work and Proof-of-Stake. It examines FBA's architecture, the philosophical differences between Stellar's bottom-up approach and Ripple's managed model, discusses inherent risks like bootstrapping trust and quorum centralization, and explores emerging applications beyond cryptocurrency.

The Stellar Development Foundation outlines its framework for evaluating and selecting validator nodes to trust in its quorum configuration, based on eight key dimensions including security practices, geographic diversity, and organizational reliability. The article serves as both a transparency report on SDF's validator trust decisions and a blueprint for other network operators building their own validator configurations.

Normal has partnered with Halborn for a comprehensive security audit, backed by the Stellar Development Foundation (SDF). This initiative aims to ensure world-class security using industry-leading solutions.

Range announces a partnership with Peersyst to bring its cross-chain monitoring, security, and intelligence tools to the XRPL EVM sidechain launching in 2025. XRPL EVM introduces Ethereum-compatible smart contracts to the XRP ecosystem while preserving XRPL's speed and low costs, enabling DeFi, staking, and interoperability via IBC, Axelar, and Wormhole. Range will provide day-one support including its Cross-Chain Explorer, Monitoring and Alerts, and Trail forensic tool.

The article explains blockchain security fundamentals and highlights why Stellar is ideal for fast, low-cost payments and financial inclusion. It emphasizes Stellar's support for both cryptocurrencies and fiat, with tiny transaction fees. Tellus Cooperative promotes educational events on Stellar and Web3 for Latin American communities.

The Stellar Development Foundation announced enhanced 2025 updates to the Soroban Security Audit Bank, which has conducted over 40 audits and deployed $3 million in support. The program now offers complimentary initial audits with co-payment refunds for swift vulnerability remediation, incentivized follow-up audits at TVL milestones, advanced security tooling, and enhanced audit readiness support.

Range's Cross-Chain Explorer now tracks Allbridge Core, enabling real-time monitoring of $2.6B in cross-chain stablecoin flows across 12 chains. Users can set custom alerts on transfers, analyze flow patterns, and investigate suspicious activity. Data is available via Range's API for custom dashboards and compliance tools.

The article highlights the inefficiencies of traditional income verification processes, including delays, privacy invasions, and vulnerability to AI-generated fraud. It discusses how these issues lead to applicant drop-offs and business losses. Reclaim (or BlueCheck) offers an instant, document-free solution using trusted sources like IRS and payroll systems for secure verification.

Researchers uncovered critical vulnerabilities in browser wallets including Stellar Freighter, enabling attackers to silently steal recovery phrases and drain funds just by visiting a malicious site, without user interaction. Detailed exploits in Stellar Freighter, Frontier, and Coin98 wallets were reported and fixed with bounties. These flaws highlight risks in wallet architecture and the need for robust security.

This article contrasts Proof-of-Stake (PoS) vulnerabilities in networks like Ethereum and Solana with Stellar's Proof-of-Agreement (PoA) consensus. It highlights PoS risks such as MEV exploits, censorship, and irrational state attacks due to anonymous validators. Stellar's trust-based model requires validators to earn trust from peers, enhancing security through reputation rather than economic stakes.

This article explains how to monitor Soroswap, the first DEX on the Soroban Blockchain within the Stellar ecosystem, using Alterscope's risk infrastructure. Alterscope provides real-time metrics on security, liquidity, development activity, audits, TVL, volume, and social engagement for informed DeFi risk management. Soroswap, developed by Palta Labs, offers fast, low-cost token swaps with strong security features including audits by OtterSec and Runtime Verification.

Estrela, a Soroban-based DEX on Stellar, has completed its second security audit by Quarkslab, focusing on its 3-pool smart contracts. No critical issues were found, confirming a strong security foundation ahead of launch. This builds on Quarkslab's prior audits of Estrela and Allbridge Core.

OpenZeppelin's security audit of the Stellar Contracts Library, a new set of smart contract components for Soroban, identified one high-severity issue, one medium-severity issue, and five low-severity issues across fungible token and pausable utility modules. All issues have been resolved through pull requests.

The Stellar Development Foundation's research team published a 2024 recap highlighting their expansion to two full-time researchers, three peer-reviewed publications on distributed computing and consensus algorithms, five research talks at major conferences, and funding for 14 academic research groups globally.

Runtime Verification details their process for building formal verification and fuzzing tools using the K Framework to enhance smart contract security. They highlight tools like Kontrol for Ethereum and Komet specifically for Soroban smart contracts on Stellar. The post aims to bridge the gap between developers and advanced security tooling.

CoinFabrik shares insights from three major crypto conferences: Permissionless III highlighted Web3 marketing's growing importance, Meridian 2024 showcased Scout's positive reception in the Stellar ecosystem, and Avalanche Summit LATAM featured CyScout, their new CodeQL-based security tool for Solidity developers.

Blockaid has integrated its Onchain Detection and Response (ODR) security technology into Stellar's Lobstr and Freighter wallets, providing real-time threat monitoring and malicious transaction detection. This partnership marks the first deployment of Blockaid's Web3 security features on the Stellar blockchain.

Dfns ships Givre, an optimized FROST threshold signature library for distributed cryptographic systems. The open-source implementation outperforms existing Rust threshold EdDSA implementations and supports Bitcoin BIP340, Stellar, Soroban, Solana, and Tezos. Now maintained by Lockness under the Linux Foundation Decentralized Trust.

Tansu integrates stellar.expert's contract validation mechanism to ensure its on-chain contract matches the source code repository. This uses GitHub actions and SLSA attestations for supply-chain security. The feature verifies contract provenance on the Stellar blockchain explorer.

Soroswap, the first DEX on Stellar blockchain, evolved into an AMM aggregator to combat fragmented liquidity. They partnered with PaltaLabs for development and Runtime Verification for auditing via the Stellar Audit Bank program. The audit enhanced security and provided key insights like using deployer contracts.

Runtime Verification introduces Komet, a formal verification and fuzzing tool for Soroban smart contracts on the Stellar blockchain, funded by the Stellar Community Fund. The tool aims to enhance smart contract security through mathematical guarantees against vulnerabilities. The team seeks continued community support to expand its capabilities.

Stellar has partnered with Hypernative to adopt its real-time threat detection and response platform to protect the network and projects building on it from hacks and security threats.

Obsrvr has deployed three full validator nodes on the Stellar network to enhance decentralization, security, and reliability. The geographically dispersed nodes are actively participating in the Stellar Consensus Protocol and maintain their own history archives. Obsrvr aims to achieve Tier 1 status and invites other validators to add their nodes to quorum sets.

This article explains the Stellar Consensus Protocol (SCP), Stellar's unique approach to blockchain consensus that prioritizes speed, reliability, and decentralization without resource-intensive proof of work. It covers key concepts like quorum sets, voting mechanisms, quorum intersections, and the security benefits of using nodes operated by well-known organizations.