AhaLabs: Scaffold Registry audit report
Project Information
CATEGORY
Smart Contracts
NETWORK
Stellar
WEBSITE
https://ahalabs.dev/
DESCRIPTION
From Sep. 26, 2025 to Sep. 22, 2025, AhaLabs engaged Veridise to conduct a security assessment of the Scaffold Registry – a smart contract that enables users to publish and verify versioned contract WASM binaries, deploy them as named instances, manage multiple contract versions, and reuse deployed contracts across decentralized applications. Veridise conducted the assessment over 6 person-days, with 2 security analysts reviewing the project over 3 days. The review strategy was a manual code review of the program source code performed by Veridise security analysts.
Audit Report
SCOPE
The scope of this security assessment is limited to a specific set of source files, as agreed upon with the Scaffold Registry developers.
- contracts/registry/src/registry/wasm.rs
- contracts/registry/src/registry/contract.rs
- contracts/registry/src/version.rs
- contracts/registry/src/util.rs
- contracts/registry/src/registry.rs
- contracts/registry/src/name.rs