scout-soroban icon indicating copy to clipboard operation
scout-soroban copied to clipboard

Scout is an extensible open-source tool intended to assist Stellar Soroban smart contract developers and auditors detect common security issues and deviations from best practices.

Results 57 scout-soroban issues
Sort by recently updated
recently updated
newest added

Includes: - Storage change events detector: emits a warning when storage is modified in any way and the contract does not emit an event. - Storage change events test cases....

## Description The detector should only be triggered when the `panic!(..)` is used in a function whose return type is a `Result` ## Acceptance Criteria Add test-cases to reflect this...

Users should be able to generate multiple report formats in a single Scout execution. For example: The command `cargo scout-audit --output-format md,json`should generate both markdown and json reports. Keep the...

When a user requests the generation of the report in a specific format (pdf, md, json, etc.), show a message indicating that the process was completed successfully and the path...

Every report should include a summary including: - Package: name of the package on which Scout was executed. - Status: status of the execution ("Analyzed" || "Compilation errors") - Detections:...

Considering that the token interface is implemented as a trait, check that all token interface functions events are properly emitted.

Severity: Enhancement/Best practices Every time storage is changed, the program should emit an event.