PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Audit of Allbridge Estrela — Round 2

blog.quarkslab.com | research | #defi | #audit | #blockchain | #stellar | #soroban | #amm
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Round two of Quarkslab's audit of Allbridge Estrela, the StableSwap AMM for Stellar: reviewing the new 3-token pool and refactored code, with four findings, only one rated low severity.
Published
Collected

Related coverage

research · blog.quarkslab.com
Audit of Allbridge Estrela
Quarkslab audited Estrela, Allbridge's StableSwap AMM for Stellar built on Soroban: seven issues found, the most severe an integer overflow when depositing liquidity that could lead to loss of funds.
research · blog.quarkslab.com
Audit of Airswift's Supply Chain Financing
Quarkslab audited Airswift's supply chain financing contracts on Stellar's Soroban: 33 issues (27 unique, including three critical) across six smart contracts, with common pitfalls discussed.
research · blog.quarkslab.com
Audit of Allbridge Core
Quarkslab audited Allbridge Core's Stellar implementation on Soroban, reviewing four smart contracts: eight issues found, led by a medium-severity flaw letting an admin drain stablecoin liquidity.
blog · hackenproof.com
1inch Bug Bounty Report: Aqua Edition, H1 2026
This report highlights common smart contract and DeFi logic vulnerabilities discovered through crowdsourced security testing.
blog · hackenproof.com
Security State 2022: Avalanche Ecosystem
HackenProof's survey of the Avalanche ecosystem reviewed 163 projects—99 DeFi, 48 infrastructure, 16 wallets—and found about 40% protected by audits or bug bounties, with bug bounties slightly ahead.
blog · hackenproof.com
How to hack everiToken?
An introduction to everiToken, a token-based public chain that replaces smart contracts with 'safe contracts' and BFT-DPOS consensus, plus node setup, API testing, and a node vulnerability.
Back