Soroban security audit bank: raising the standard for smart contract security

The Stellar Development Foundation (SDF) is deeply committed to helping ensure that the highest security standards are available for projects building on the Stellar network. Last year SDF launched the Soroban Security Audit Bank, an initiative to provide projects access to auditing experts and tooling that are proven to help prevent hacks by catching potential bugs, inefficiencies, and security flaws before contracts go live. Through the Soroban Security Audit Bank, we’re empowering teams building on Soroban with comprehensive security audits from leading audit firms, enhanced readiness support, and robust tooling, significantly elevating the ecosystem’s safety and efficiency.

Since launch, the Soroban Security Audit Bank has successfully conducted over 40 essential audits, deploying over $3 million to support security of the smart contracts on Stellar. Check it out!

Teams building financial protocols, high-dependency data services, high-traction dApps funded by the Stellar Community Fund are able to request an audit and will typically be matched with a reputable audit firm within two weeks. We recently restructured the program for this year to enhance audit efficiency and incentivize accountability, and rapid and complete vulnerability remediation:

• Complimentary Initial Audit: Projects will need to contribute 5% of the audit cost upfront, but this co-payment amount is eligible for a full refund, provided that critical, high, and medium vulnerabilities identified are swiftly remediated within 20 business days of receiving the initial audit report (learn more).
• Incentivized Security at Key Traction Milestones: Complimentary, extensive follow-up audits are available as projects achieve critical traction milestones (e.g., $10M and $100M TVL). These audits include deeper assessments such as formal verification or competitive audits, significantly boosting project security at pivotal stages.
• Advanced Security Tooling: Projects can enhance their security self-serve through complimentary or discounted access to specialized tooling, which provide vulnerability detection and formal verification capabilities (see full list of available tooling). These tools are encouraged to capture ‘easy-to-spot’ issues prior to audit as well as a final check post-audit to increase the effectiveness and thoroughness of audits.
• Enhanced Audit Readiness Support: Projects receive structured preparation support, including the implementation of best practices and security standards based on the STRIDE threat modeling framework. This ensures project teams are thoroughly prepared, optimizing audit efficiency and minimizing delays.