Stellar Ecosystem
News

CertiK explores two critical vulnerabilities in Soroban contract state storage: storing long-term data in Temporary storage risks irreversible loss when entries expire; relying on TTL expiry alone for nonce validation enables signature replay attacks. The article walks through vulnerable code patterns and secure alternatives using Persistent and Instance storage.

Certora outlines a practical threat modeling approach for Soroban smart contracts using the 4 A's framework (Assets, Actors, Assumptions, Attack Vectors) and STRIDE methodology, emphasizing that early threat modeling reduces bugs and speeds audits.

OctoLend introduces collateral vaults as a bridge enabling RWAs to work with DeFi lending protocols. By delegating liquid XLM collateral, institutional borrowers can access RWA-backed leverage while maintaining compliance with redemption windows and KYC requirements.

Kuyfi, a black-box security scanner for Soroban smart contracts, launches its first phase. It analyzes contract bytecode without requiring source code, addressing a critical gap in DeFi security for protocols like Soroswap and Blend.

Certora and the Stellar Development Foundation published a comprehensive guide for preparing Soroban smart contracts for security audits through the Audit Bank program, covering threat modeling, code quality, testing, and security tooling.

Bastian built Calypso, an AI-powered autonomous agent system that spawns trading bot swarms across Stellar DEXes using x402 micropayments. The hackathon project serves as the technical foundation for Hoops Finance's next phase, enabling realistic testnet market conditions and agent-native DeFi strategy execution.

A technical deep-dive into Zero-Knowledge Proofs as a solution for blockchain scalability and privacy, featuring Noir DSL for circuit design and Soroban integration on Stellar. The author demonstrates production-ready ZK implementation through Cosmic Coder, a game that validates player progress on-chain using cryptographic proofs.

OctoLend plans to enable Bitcoin as collateral for USDC loans on Stellar by leveraging NEAR's chain abstraction stack, including Chain Signatures for MPC-controlled BTC vaults and Intents for cross-chain proof verification.

Hoops Finance released a major authentication update enabling passkey-controlled smart accounts on Soroban, allowing users to authorize DeFi operations via biometric authentication without seed phrases or browser extensions. The founder detailed months of foundational work building the custom authentication layer, demonstrating a complete DeFi lifecycle from account creation through multi-protocol atomic deposits and withdrawals.

A technical guide demonstrating how to integrate Noir zero-knowledge circuits with Stellar's Soroban smart contracts using UltraHonk proofs and bb.js for proof generation.

Stellar Dev Skill is a new open-source tool that integrates with AI coding agents (Claude, OpenCode, Codex) to provide up-to-date Stellar development guidance, covering Soroban contracts, SDKs, APIs, wallets, security, and DeFi ecosystem resources.

Spiko launched tokenized funds on Stellar in October 2025, detailing how they adapted their infrastructure to Soroban's unique constraints: TTL-based storage, sequence number limitations, and RPC data retention. They implemented channel accounts and fee bump transactions to achieve high throughput while maintaining clean authorization.

A comprehensive guide to building decentralized applications on Stellar's Soroban smart contract platform, covering essential developer tools, a step-by-step roadmap from setup through deployment, and community resources for support.

An article discussing the importance of financial privacy in blockchain systems and how Stellar's upcoming Protocol X-Ray upgrade will enable zero-knowledge proof verification in Soroban smart contracts, allowing developers to build privacy-preserving applications while maintaining blockchain transparency.

Inference, a formal verification framework, analyzes three WebAssembly-based blockchains for verifiability. Stellar Soroban emerges as the most feasible target due to its minimalist architecture and strict separation of business logic from infrastructure, unlike Polkadot's monolithic design.

Stellar hackathons are driving innovation by fostering collaborative development of decentralized apps on the Stellar blockchain and Soroban smart contracts. Key initiatives like the Build Better Contest and partnerships with UNDP's SDG Blockchain Accelerator turn ideas into real-world impact projects. These events build a thriving developer community through learning, networking, and funding opportunities.

SorobanDomains is upgrading to NFDs (Non-Fungible Domains) using the SEP-0050 NFT standard on Stellar's Soroban. A new Registry v2 removes collateral requirements in favor of yearly fees and adds Soroban Events for better indexing. Existing domain owners get 90 days to migrate for free before new registrations open.

This article describes the prototyping of Privacy Pools on Stellar's smart contracts platform, implementing a privacy-preserving protocol that uses zero-knowledge proofs and Association Set Providers (ASPs) to enable private transfers while maintaining compliance standards.

The Stellar network is introducing the X-Ray protocol upgrade, which adds native support for BN254 elliptic curve operations and Poseidon hash functions to enable developers to build zero-knowledge privacy applications. The upgrade, scheduled for testnet vote on January 7, 2026 and mainnet vote on January 22, 2026, establishes cryptographic foundations for privacy-preserving applications without compromising Stellar's transparency.

Stellar's Soroban runtime engineers have integrated Solidity support into Soroban via Hyperledger Solang, enabling developers to write smart contracts in Solidity and compile them to WebAssembly. The Solang Playground Web IDE is now available for developers to write, compile, and deploy Solidity contracts on Soroban Testnet.

The Stellar Development Foundation disclosed a bug in Soroban Live State Prioritization (introduced in Protocol 23) that corrupted 478 data entries starting September 4, 2025. The issue was in the eviction mechanism that moved outdated versions of persistent entries to hot-archive storage instead of the latest versions, affecting network data consistency.

The Trustless Work Backoffice dApp is a decentralized control panel on the Stellar blockchain for deploying, managing, and releasing funds from smart escrows without coding. It serves as a production-grade backoffice, testnet sandbox, and open-source template for escrow operations. Key features include role-based dashboards, API key management, and support for single or multi-release escrows.

Tansu has been officially deployed on Stellar's mainnet with contract ID CDXINK2T3P46M4LWK35FVIXXHJ2XHAS4FOVCGVPJ63YV5OVTM24IY5BI. Users can view the contract on Stellar Expert and access the dApp at app.tansu.dev to register projects and secure software supply chains.

BPVentures and LightEcho announced a new Chainlink-compatible, SEP-40 compliant randomness feed for the Stellar Soroban ecosystem. Identified by the SEP-40 SYMBOL: RANDOM, it provides verifiable 32-byte random words for game developers via a standard oracle interface. This enables easy integration for games, mints, raffles, and procedural generation without custom code.

A comprehensive tutorial on implementing tokenized vaults on Stellar Soroban following the ERC-4626 standard pattern. The article explains vault mechanics, security considerations like inflation attacks, and details both read-only and state-changing vault functions for deposits, withdrawals, and asset conversions.