Stellar Network Security Tool

Powered by Nafuloo Logo NAFULOO

Scan Soroban
Smart Contracts

Deep vulnerability scanning and security analysis for Stellar's Soroban smart contracts. WASM bytecode inspection, static analysis, on-chain risk heuristics, and comprehensive scan reports β€” all powered by a nominal fee of 10,000 NAFU per scan (currently valued at a few cents in USD).

10 Check Categories
0–100 Risk Score
A–F Grade System

Soroban Smart Contract Security Analysis

Purpose-built security analysis engine for Soroban smart contracts on the Stellar blockchain. WASM bytecode inspection, on-chain risk heuristics, and vulnerability detection β€” all checks follow Stellar ecosystem best practices.

πŸ”

Static Analysis

10-category Soroban-specific checks: auth, upgradeability, mint/burn control, storage TTL, cross-contract risks, and more.

⛓️

On-Chain Heuristics

Deployer age analysis, invocation patterns, admin centralization detection, and upgrade history tracking via Horizon.

πŸ“Š

Risk Scoring

0–100 score with letter grade (A–F), confidence level, and explainable deductions per finding severity.

πŸ“‹

Detailed Reports

Every finding includes severity, why it matters, how to fix it, code context, and Soroban best-practice references.

πŸ”

Payment Gated

A nominal fee of 10,000 NAFU per scan with on-chain payment verification, anti-replay invoice binding, and treasury routing.

πŸ“œ

Scan History

Full scan history of all your scans with filtering, downloadable reports, and invoice tracking.

10 Soroban Security Check Categories

Every smart contract scan runs through a comprehensive ruleset covering Soroban-specific vulnerabilities, Stellar on-chain risk patterns, and WASM bytecode analysis.

01 Missing require_auth on privileged functions
02 Upgradeability & admin control risks
03 Mint/burn supply manipulation
04 Blacklist/freeze/clawback logic
05 Storage TTL state persistence risks
06 Cross-contract call vulnerabilities
07 Precision & rounding issues
08 DoS via unbounded loops
09 Event transparency gaps
10 Deployer account age heuristics
Run a Scan

Smart Contract Risk Grading System

Clear, actionable security grades for Soroban contracts backed by explainable score deductions per vulnerability finding.

A 90–100 Minimal risk
B 75–89 Low risk
C 60–74 Moderate risk
D 45–59 High risk
F 0–44 Critical risk

How It Works

01

Connect Wallet

Link your Stellar wallet via Freighter or paste your public key.

02

Enter Contract

Paste the Soroban contract ID and select mainnet or testnet.

03

Pay 10,000 NAFU

Send a nominal 10,000 NAFU (currently valued at a few cents in USD) to treasury with the scan invoice memo.

04

Get Report

Receive a full vulnerability report with score, findings, and fixes.

Ready to Scan Your Contract?

Join the Nafuloo ecosystem and secure your Soroban smart contracts on the Stellar blockchain today. A nominal 10,000 NAFU per security scan (currently valued at a few cents in USD) β€” transparent, on-chain, and verifiable.