Inside Stellar’s proactive security approach with Tomer Weller: The Soroban Security Audit Bank
In a recent fireside chat, we sat down with Tomer Weller (Chief Product Officer) from the Stellar Development Foundation to discuss the Soroban Security Audit Bank, an initiative aimed at bolstering the security of the Stellar ecosystem, particularly for projects building on Soroban.
Tomer unpacks how the Audit Bank works, how you can get an audit funded through it, and why it serves as a model for the broader Web3 ecosystem. Tomer also shares advice for developers on what kinds of issues to watch out for when building on Soroban.
The conversation is hosted by Kostas Ferles from Veridise.
See the full timestamps and text summary below.
Timestamps
00:00 Introduction
00:59 Inspiration behind the Soroban Security Audit Bank?
03:05 How projects can access audits from the Audit Bank?
04:31 Expected bugs and vulnerabilities?
09:15 Can this model be a blueprint for other ecosystems?
10:45 Ecosystem insights (Kostas)
13:44 Evaluation criteria for the Soroban Security Audit Bank program?
15:40 Security advice for Soroban builders?
16:32 What are common bugs to avoid in Soroban?
19:07 What’s next for Soroban?
22:24 ZK and privacy: where to focus? (Kostas)
23:42 Closing remarks
Summary of the fireside chat
Below is a text summary of the fireside chat.
What is Stellar and Soroban?
Stellar is a decentralized, public blockchain that gives developers the tools to create experiences that are more like cash than crypto. Soroban is Stellar’s smart contract platform.
What is the Soroban Security Audit Bank?
The Soroban Security Audit Bank is a system designed to support projects building on Stellar and Soroban by enabling them to seek out third-party security reviews from external security auditors. This program represents a significant shift from reactive security — responding after an incident — to a proactive approach, embedding security from the outset.
The inspiration: A proactive…
Full blog post available on our new Veridise blog
We’ve recently moved our main blog to the Veridise website!
You can continue reading the rest of the blog post here:
https://veridise.com/blog/learn-blockchain/how-is-stellar-funding-smart-contract-security-at-scale/
Author: Mikko Ikola, VP of Marketing at Veridise
Want to learn more about Veridise?
Twitter | LinkedIn | Github | Request Audit
