Implement Soroban Unsafe Operation Detector

[mijinummi]

🧠 Concept

Detect potentially unsafe operations in Soroban contracts.

⚠️ Problem

Unsafe operations may introduce security vulnerabilities and unexpected behavior.

📁 Implementation Scope

• src/rules/security/stellar/unsafe-operations/

✅ Requirements

• Detect risky operation patterns
• Flag unsupported unsafe constructs
• Provide remediation guidance

🎯 Acceptance Criteria

• Unsafe operations detected
• Findings include recommendations

[onajidavid87-web]

Hello maintainer, i would love to work on this issue

[grantfox-oss]

🦊 GrantFox — @onajidavid87-web has been assigned to this issue as part of the Official Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #496)
2. Your PR will be reviewed by the MDTechLabs maintainers

Good luck! Track your progress on GrantFox.

[Malik6828]

@Malik6828 has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Hello GasGuard Team,

I would like to apply for the issue: Implement Soroban Unsafe Operation Detector.

Implementation Plan

• Create a new rule module under src/rules/security/stellar/unsafe-operations/.

• Define detection logic to scan Soroban contracts for risky or unsafe operation patterns (e.g., unsafe host functions, unchecked external calls, or deprecated constructs depending on Soroban constraints).

• Implement pattern matching and AST-based or static analysis checks (depending on existing GasGuard architecture) to reliably flag unsupported or unsafe constructs.

• Ensure each detection produces a structured finding that includes:

  • Location of issue
  • Type of unsafe operation
  • Severity level
  • Clear remediation guidance aligned with Soroban best practices

• Integrate the rule into the existing security scanning pipeline without impacting performance or breaking existing rules.

Expected Outcome

The detector will reliably identify unsafe Soroban operations, provide actionable remediation suggestions, and strengthen contract security analysis within GasGuard.

I will ensure the implementation is modular, consistent with existing rule patterns, and easy to extend for future Soroban security checks.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Malik6828 to this issue.

[OlaBakare]

@OlaBakare has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Hi, I'd love to work on this issue. I can handle this issue.
Thank you.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @OlaBakare to this issue.

[techisigu]

@techisigu has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

I am a Smart Contract and Blockchain Developer focused on building secure, efficient, and scalable decentralized systems. My passion lies in transforming ambitious ideas into reliable blockchain products that solve real-world problems and create meaningful value for users.

With expertise in Solidity and Rust, I design and develop smart contracts that prioritize security, performance, and maintainability. I have experience building and deploying decentralized applications, implementing complex on-chain logic, and creating systems that can operate reliably in production environments. Every line of code I write is guided by best practices, rigorous testing, and a commitment to delivering software that users and organizations can trust.

My work with the Stellar ecosystem and Stellar SDK has equipped me with the skills to build financial applications, payment solutions, and blockchain-based platforms that enable seamless movement of value across networks. I enjoy leveraging blockchain technology to improve transparency, efficiency, and accessibility in digital systems.

Beyond technical development, I am a problem solver who thrives on tackling challenging engineering tasks. I enjoy collaborating with multidisciplinary teams, contributing to product strategy, and turning innovative concepts into functional, user-focused solutions. I continuously invest in learning and staying current with emerging technologies to ensure the products I build remain relevant, secure, and future-ready.

As a developer, my goal is not simply to write smart contracts but to engineer dependable blockchain infrastructure that empowers businesses, strengthens digital ecosystems, and accelerates the adoption of decentralized technologies worldwide.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @techisigu to this issue.

[dDevAhmed]

@dDevAhmed has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

I would like to work on this

ℹ️ Repo Maintainers: To accept this application, review their application or assign @dDevAhmed to this issue.

[drips-wave]

Congratulations, @dDevAhmed! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on June 30, 2026.

🧑‍💻 @dDevAhmed: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊

[grantfox-oss]

🦊 GrantFox — @dDevAhmed has been assigned to this issue as part of the Official Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #496)
2. Your PR will be reviewed by the MDTechLabs maintainers

Good luck! Track your progress on GrantFox.