Taran.Space reviews Stellar and Soroban systems across core protocol changes, smart-contract execution, cross-chain messaging, gateway logic, metering, storage behavior, authorization, and protocol-level trust boundaries. Our delivered Stellar work includes both Stellar Core protocol review and Soroban-based cross-chain messaging security.
Stellar is a major blockchain infrastructure network for payments, tokenized assets, and financial applications. The work was delivered through public Oak Security engagements and covered Stellar Core protocol updates, with focus on correctness and consensus-sensitive changes that affect secure network operation.
Review scope included protocol logic, metering behavior, Soroban-adjacent execution, cryptographic components, and implementation details across Rust and C++ code. The work focused on changes where subtle correctness issues could affect transaction processing, resource accounting, smart-contract execution behavior, or the reliability of protocol upgrades.
STBL is a stablecoin infrastructure protocol for token issuance, asset management, yield distribution, and operational control. We carried out the review for Hashlock, covering STBL’s Stellar/Rust smart-contract system, including asset issuer, airdrop issuer, USST/STBL token, oracle, registry, access-control, upgrade, and yield-distribution components.
Security work focused on expired-position handling, yield and accounting fairness, token blacklist and pause behavior, vault accounting assumptions, oracle configuration, role administration, and privileged controls across the protocol’s financial flows.
VIA Labs builds cross-chain messaging infrastructure for moving data and value between blockchain networks. In a Hashlock-branded engagement, we reviewed VIA Labs’ Stellar/Soroban Rust messaging stack, covering client, fee-handler, gas-handler, message-client, and message-gateway components.
Scope centered on cross-chain message safety, gateway replay protection, destination-chain binding, processed-state handling, Soroban storage behavior, signer and finality assumptions, ABI decoding, and fee/gas handling across the messaging stack.
Tell us what you’re building and what kind of security support you need. Telegram is usually the fastest way to reach us. For formal inquiries, you can also use email.
