PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Audit of Airswift's Supply Chain Financing

blog.quarkslab.com | research | #supply-chain | #web3 | #smart-contracts | #defi | #audit | #blockchain | #stellar | #soroban
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab audited Airswift's supply chain financing contracts on Stellar's Soroban: 33 issues (27 unique, including three critical) across six smart contracts, with common pitfalls discussed.
Published
Collected

Related coverage

blog · hackenproof.com
How to hack everiToken?
An introduction to everiToken, a token-based public chain that replaces smart contracts with 'safe contracts' and BFT-DPOS consensus, plus node setup, API testing, and a node vulnerability.
research · blog.quarkslab.com
Audit of Allbridge Estrela — Round 2
Round two of Quarkslab's audit of Allbridge Estrela, the StableSwap AMM for Stellar: reviewing the new 3-token pool and refactored code, with four findings, only one rated low severity.
research · blog.quarkslab.com
Audit of Allbridge Estrela
Quarkslab audited Estrela, Allbridge's StableSwap AMM for Stellar built on Soroban: seven issues found, the most severe an integer overflow when depositing liquidity that could lead to loss of funds.
research · blog.quarkslab.com
Audit of Allbridge Core
Quarkslab audited Allbridge Core's Stellar implementation on Soroban, reviewing four smart contracts: eight issues found, led by a medium-severity flaw letting an admin drain stablecoin liquidity.
research · osec.io
Hitchhiker’s guide to Aptos fungible assets
OtterSec deep dive into Aptos fungible assets: how the new model addresses legacy Coin flaws such as freeze/burn bypass, plus issues found and fixed in pre-release audits.
blog · blog.trailofbits.com
Building secure Uniswap v4 hooks
Uniswap v4 hooks can satisfy PoolManager settlement invariants while still violating application-level accounting or authorization assumptions. The seven recurring failure patterns form a practical review checklist for hook developers and auditors.
Back