SecureSoroban
Version updated for https://github.com/mammumammi/Secure-soroban-marketplace-Action to version v1.0.2.
- This action is used across all versions by ? repositories.
Action Type
This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary
SecureSoroban automates the detection of critical vulnerabilities in Soroban smart contracts by simulating real attack vectors, confirming what actually breaks, and calculating estimated financial loss in XLM and USD. It helps prevent vulnerabilities from reaching mainnet and blocks deployment automatically if critical issues are found. SecureSoroban also includes a local AI agent powered by Qwen2.5-coder:7b for more advanced analysis and targeted attacks.
What’s Changed
First release of SecureSoroban — automated smart contract attack simulator for the Stellar ecosystem.
What’s included
- Authorization bypass detection
- Unauthorized drain detection
- Reentrancy pattern detection
- Integer overflow detection
- Static source code analysis
- Financial loss calculation in XLM and USD
- Automatic push blocking on critical findings
Setup
See README.md for full setup instructions.
Built at Stellar Build Station Kerala 2026.