DeFi, payments, tokenization, Soroban, governance, and project launches — curated daily from publications, project blogs, and community channels across the Stellar blockchain ecosystem.
Coinspect has published the results of their security audit of the Tricorn Bridge's Soroban integration, conducted in collaboration with Boosty Labs and the Stellar Development Foundation. The audit identified 3 high-risk, 6 medium-risk, and 1 low-risk vulnerabilities in the smart contract's Rust source code and Golang backend. All findings have been addressed by the development teams, enhancing Soroban security knowledge.
Tansu has received an SCF28 Activation award to build infrastructure that anchors Git commit hashes on Soroban. The system creates a decentralized record of code changes, helping maintainers verify project integrity and combat centralized platform risks without disrupting existing workflows.
Soroban, Stellar's smart contract platform, is built on three core pillars: performance, sustainability, and security. The article details how Soroban's architecture—leveraging Rust and WebAssembly, implementing conflict-free concurrency, and prioritizing security through design—enables developers to build scalable and secure applications without performance bottlenecks.
Stellar Protocol 21 went live on June 18, 2024, introducing five Core Advancement Proposals including native secp256r1 verification for passkey support in smart contracts, alongside efficiency improvements for state archival and transaction costs.
Alterscope, a Stellar Community Fund featured project, offers a comprehensive risk dashboard for the Soroban ecosystem to enhance DeFi transparency and risk management. It provides real-time risk overviews, customizable frameworks, and metrics across security, liquidity, community, and governance. Integration benefits dApps by boosting credibility, attracting liquidity providers, and promoting regulatory compliance.
Alterscope introduces a comprehensive risk dashboard for the Stellar Soroban ecosystem, recently funded by the Stellar Community Fund. It provides real-time risk metrics, transparency, and customizable frameworks to help liquidity providers assess protocols. Integration benefits dApps by enhancing credibility, attracting investments, and promoting a safer DeFi environment.
Veridise security analysts discovered a critical issue in Soroban's build-test-deploy process where the `createimport!` macro allows deployment of contracts with outdated or incorrect imported dependencies without requiring them to be listed as crate dependencies, potentially leading to broken contracts in production.
FxDAO shares its Q1 2024 update, highlighting the completion of a smart contract audit by Runtime Verification and adaptations to Soroban platform changes on Stellar. Despite challenges like limit downgrades requiring refactors, the team resolved issues to fit current network limits. They are preparing for mainnet launch with vaults for synthetic USD, EUR, and GBP, alongside plans for a custom oracle.
Runtime Verification completed an audit of Band Protocol's Rust implementation of the Band Standard Reference Soroban Smart Contract. This contract enables querying real-world asset prices from BandChain into the Stellar network's Soroban mainnet. The audit identified issues and informative findings, with a detailed report available.
The Stellar Development Foundation launched the Soroban Security Audit Bank, distributing up to $1M in audit credits from six top-tier firms to 20-30 high-priority projects building on Soroban to strengthen smart contract security across the ecosystem.
A comprehensive guide explaining authentication and authorization mechanisms in blockchain, with specific focus on how Stellar and Soroban implement these security features through digital signatures, multisig, thresholds, and smart contract-based account abstraction.
Stellar Anchors serve as bridges between traditional finance and the Stellar blockchain, enabling fiat-to-digital asset exchanges, but face trust issues due to centralization. The new Anchor Transparency Node, powered by Log Store Network, provides verifiable transparency for off-chain transactions. This enhances trust, supports real-world assets, and fosters inter-business confidence in the Stellar ecosystem.
The Stellar Development Foundation has decided to disarm its validators and postpone the Protocol 20 upgrade scheduled for January 30, 2024, following ecosystem concerns about a discovered bug in Stellar Core v20.1.0 affecting fee bumps for Soroban transactions.
The Stellar Development Foundation disclosed a bug in Stellar Core v20.1.0 affecting fee-bumped Soroban transactions, where refunds are incorrectly sent to the sponsored account instead of the sponsor. SDF decided to proceed with the Protocol 20 upgrade vote on January 30 as planned, citing low risk during early Soroban phases and the availability of mitigation best practices.
Range announces a long-term security partnership with Margined Protocol to enhance security for its on-chain perpetuals and vaults on Cosmos. Range will provide customized monitoring, analytics, risk dashboards, and incident response tools. Margined is innovating DeFi perpetual products on CosmWasm networks.
Range partners with Oak Security to deliver end-to-end security for Cosmos projects, extending audits into continuous monitoring. This addresses limitations like dynamic codebases and third-party risks. Range, trusted by Stellar among others, provides customized real-time security tools.
Range CEO Andres Monteoliva spoke at the Modular Summit on security advantages of app-specific roll-ups over monolithic blockchains. Range provides intelligence and risk platforms for cross-chain stablecoin infrastructure, trusted by Stellar, Solana Foundation, Circle, and others. Their tools include Faraday for transaction routing and compliance, and a Stablecoin Explorer tracking nearly 200 stablecoins.
Range CEO Andres Monteoliva discusses mitigative measures for blockchain bridge exploits at the DeFi Security Summit. The talk covers types of bridges and security mechanisms like rate limits and circuit breakers. Range, trusted by Stellar and others, provides cross-chain stablecoin infrastructure with compliance and risk tools.
Stellar Development Foundation partners with Certora to conduct security audits for Soroban, its upcoming WebAssembly-based smart contracts platform. The formal verification tools will provide continuous integration security checks as the platform approaches mainnet launch in early 2025.
The article explores the evolution of identity authentication from paper documents to Decentralized Identifiers (DIDs) and Verifiable Credentials (VCs), emphasizing self-sovereign identity on blockchain. It highlights benefits like ownership, privacy, interoperability, and real-world applications in government, refugees, finance, and more. It teases upcoming content on implementing DIDs on the Stellar network.
The Stellar Development Foundation's Twitter account was compromised via SIM swap attack on July 8, 2023, used to spread phishing scams. SDF regained control within 6 hours and upgraded security protocols across all platforms to use stronger authentication methods like security keys.
Carole House, former White House cybersecurity director, discusses crypto's role in financial crime investigations, regulatory enforcement, and the push for an enabling US regulatory environment for digital currencies.
OG Technologies has sponsored Public Node's Tier 1 Stellar validator node Hercules, covering its hardware costs. This marks them as the second business sponsor for Public Node. The sponsorship highlights growing interest in the Stellar blockchain for Web3 solutions.
The Stellar Development Foundation launched a new bug bounty program on HackerOne focused on Soroban, the network's smart contract platform. The program offers rewards up to $50k for critical vulnerabilities, with higher bounties as Soroban matures toward Mainnet launch.
Tomer Weller from Stellar Development Foundation interviews Cubist co-founders Fraser Brown and Riad Wahby about building security-focused developer tools for cross-chain Web3 development. Cubist received a Stellar Bridge Bounty grant and discusses why they integrated with Stellar.
AnChain.AI, a Web3 security firm, integrated with Stellar to provide AI-powered risk management and fraud prevention tools for developers building on the network. The integration enables Stellar developers to access AnChain.AI's security solutions from the earliest phases of development.
MYKOBO, issuer of the EURC euro stablecoin on the Stellar blockchain, assures users of its secure and audited reserves amid the USDC depeg event. The company highlights its robust reserve management and adherence to regulations, positioning EURC as a stable bridge between European finance and blockchain. Monthly attestation reports are available for transparency.
