Program: Stellar Wave 8
Window: August 2026
Repo: BreachDirect/RytScan
- Rust workspace (
rytscan-core,rytscan-cli) - 6 security rules (AUTH, PANIC, TOKEN, EVENT, TTL, STORE)
- Fixture contracts + unit tests
- PRD, architecture, README
- 3 new rules: ARITH-001 (unchecked arithmetic), ASSERT-001 (assert macros), UNSAFE-001 (unsafe blocks) → 9 total
- SARIF v2.1.0 output (
--format sarif) for GitHub Code Scanning - CI workflow: rustfmt, clippy (
-D warnings), unit tests, fixture smoke rustfmt.tomlworkspace formatting config
cargo run -p rytscan-cli -- scan fixtures/vulnerable-vault/src
cargo run -p rytscan-cli -- scan fixtures/vulnerable-vault/src --format sarif
cargo run -p rytscan-cli -- rules- syn-based AST rule engine
-
rytscan.tomlsuppressions - GitHub Action:
BreachDirect/rytscan-action
- Post-build WASM checks (size, exports)
-
stellar contract invokesmoke probes - Simulation trace correlation
- Scan history web dashboard
- Drips Wave issue → rule matcher
- VS Code extension
See CONTRIBUTING.md and the issue tracker. Wave issue bounties are listed at Drips.