Add contract security best practices guide #1036

Activity

1. Kingsman-99

   added

   complexity: highComplex feature requiring deep knowledge - 200 ptsComplex feature requiring deep knowledge - 200 pts

   featureNew contract feature or operationNew contract feature or operation

   on Oct 20, 2026
2. ravimahatonp commented on Oct 20, 2026

   

   ravimahatonp

   on Oct 20, 2026

   More actions

   Hello team,

   I examined the issue "Add contract security best practices guide" in Stellar-split/split-contracts and would be glad to implement the required changes.

   I have reviewed the problem description and acceptance criteria for this issue. I have a clear, tested implementation ready with defensive error handling and 100% green CI proof.

   I will deliver a clean, well-tested, and production-ready PR promptly upon assignment. Kindly assign this issue to me.

   Thank you!
3. drips-wave

   added

   Stellar WaveIssues in the Stellar wave programIssues in the Stellar wave program

   on Oct 22, 2026
4. musa1890 commented on Oct 22, 2026

   

   musa1890

   on Oct 22, 2026 – with Drips Wave

   More actions

   @musa1890 has applied to work on this issue as part of the Stellar Wave Program's 10th wave.

   Hi maintainers I can get this fix kindly assign for God sake

   ℹ️ Repo Maintainers: To accept this application, review their application or assign @musa1890 to this issue.
5. kanuemmanuel commented on Oct 22, 2026

   

   kanuemmanuel

   on Oct 22, 2026 – with Drips Wave

   More actions

   @kanuemmanuel has applied to work on this issue as part of the Stellar Wave Program's 10th wave.

   Hi maintainer, let me fix this issue

   ℹ️ Repo Maintainers: To accept this application, review their application or assign @kanuemmanuel to this issue.
6. elizabethklien3-pixel commented on Oct 22, 2026

   

   elizabethklien3-pixel

   on Oct 22, 2026 – with Drips Wave

   More actions

   @elizabethklien3-pixel has applied to work on this issue as part of the Stellar Wave Program's 10th wave.

   I would love to work on this issue professionally, please assign it to me

   ℹ️ Repo Maintainers: To accept this application, review their application or assign @elizabethklien3-pixel to this issue.
7. msbanky commented on Oct 22, 2026

   

   msbanky

   on Oct 22, 2026 – with Drips Wave

   More actions

   @msbanky has applied to work on this issue as part of the Stellar Wave Program's 10th wave.

   hello i am interested in fixing this kindly assign

   ℹ️ Repo Maintainers: To accept this application, review their application or assign @msbanky to this issue.
8. Saayomi commented on Oct 22, 2026

   

   Saayomi

   on Oct 22, 2026 – with Drips Wave

   More actions

   @Saayomi has applied to work on this issue as part of the Stellar Wave Program's 10th wave.

   Hi Maintainer, It's my first wave but I have solid experience as a developer, and I'll resolve the issue promptly. Please assign.

   ℹ️ Repo Maintainers: To accept this application, review their application or assign @Saayomi to this issue.
9. chibeike-AI commented on Oct 22, 2026

   

   chibeike-AI

   on Oct 22, 2026 – with Drips Wave

   More actions

   @chibeike-AI has applied to work on this issue as part of the Stellar Wave Program's 10th wave.

   Hello Maintaner please I will love to help work on this issue

   ℹ️ Repo Maintainers: To accept this application, review their application or assign @chibeike-AI to this issue.
10. huangji6693-max commented on Oct 26, 2026

    

    huangji6693-max

    on Oct 26, 2026

    More actions

    Hi maintainers! I have prepared and submitted a comprehensive Smart Contract Security Best Practices Guide (docs/SECURITY_BEST_PRACTICES.md) addressing all requirements for this issue in PR: #1058

    Highlights:

    • Threat Model & Security Concerns: Covers actor trust boundaries, authorization, reentrancy, integer precision/rounding conservation, replay protection, oracle staleness/slippage, and Soroban ledger resource/TTL bounds.
    • Vulnerability Catalog (V-01 – V-08): Concrete vulnerable vs. safe Soroban Rust code patterns mapped to security_audit.rs on-chain checks.
    • Checklists & Incident Response Runbook: Pre-development, code review, and pre-deployment checklists plus a 5-phase incident response playbook leveraging emergency_pause.rs, audit_logging.rs, and contract_upgrade.rs.