quantumscan-io/scanner-core

Scanned on Jun 26, 2026

Risk score/ 100

Clean

Summary

This repository contains comprehensive test fixtures for detecting Substrate and Polkadot blockchain cryptographic patterns including sr25519, ed25519, ECDSA, and X25519. All 48 findings are located exclusively in test files (test/substrate-patterns.test.js) as regex pattern definitions, not production cryptographic implementations. No actual vulnerable cryptographic code is present.

Critical

High

Medium

Low

Top findings

HighCWE-327Ed25519 / EdDSA

test/substrate-patterns.test.js:24

ML-DSA (CRYSTALS-Dilithium) or SLH-DSA

Raw evidence

re: /GrandpaId|grandpa_generate_session_keys|ed25519::(?:Public|Pair|Signature)\b|GrandpaAuthorityId|AuthorityList.*grandpa|GrandpaKeyType|GRANDPA_ENGINE_ID/i },

HighSubstrate Validator Keystore

test/substrate-patterns.test.js:28

Monitor substrate-crypto PQC keystore RFC

Raw evidence

re: /KeystorePtr|SyncCryptoStorePtr|LocalKeystore::open|keystore\.(?:sr25519_generate_new|ed25519_generate_new|ecdsa_generate_new)|sp_keystore|CryptoStore/i },

HighCWE-327ECDSA

test/substrate-patterns.test.js:30

ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)

Raw evidence

re: /sp_runtime::traits::Verify|MultiSignature|AnySignature|sp_core::(?:sr25519|ed25519|ecdsa)::Signature|(?:Sr25519|Ed25519|Ecdsa)Signature\b/i },

HighCWE-327ECDSA

test/substrate-patterns.test.js:32

ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)

Raw evidence

re: /sp_core::crypto::|sp_core::(?:sr25519|ed25519|ecdsa)::|use sp_core::(?:Pair|Public|Signature)|frame_support::crypto::|CryptoTypePublicPair/i },

HighCWE-327ECDSA

test/substrate-patterns.test.js:34

ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)

Raw evidence

re: /sp_io::crypto::(?:sr25519_verify|ed25519_verify|ecdsa_verify|sr25519_sign|ed25519_sign|ecdsa_sign)|sp_io::crypto::sr25519_public_keys/i },

+ 43 more findings in the full report

Scan your own repository

Free. Results in ~90 seconds. CBOM + DORA/NIS2 PDF included.

Start a free scan