Skip to content
QuantumScanPublic scan report

Repository

quantumscan-io/scanner-core

Scanned on Jun 26, 2026

18

Risk score/ 100

Clean

Summary

This repository contains 44 high-severity findings and 4 medium-severity findings, all located in test files for a cryptographic pattern scanner. All detections are test patterns rather than production cryptographic implementations. Since these are test fixtures documenting Substrate/Polkadot quantum-vulnerable patterns (sr25519, ed25519, ECDSA, X25519), they represent documentation of risk rather than actual cryptographic vulnerabilities in deployed code.

Critical

0

High

44

Medium

4

Low

0

Top findings

  • HighCWE-327Ed25519 / EdDSA

    test/substrate-patterns.test.js:13

    ML-DSA (CRYSTALS-Dilithium) or SLH-DSA

    Raw evidence
    *   5. schnorrkel / ed25519-dalek / x25519-dalek / libp2p-noise
  • HighCWE-327Ed25519 / EdDSA

    test/substrate-patterns.test.js:24

    ML-DSA (CRYSTALS-Dilithium) or SLH-DSA

    Raw evidence
    re: /GrandpaId|grandpa_generate_session_keys|ed25519::(?:Public|Pair|Signature)\b|GrandpaAuthorityId|AuthorityList.*grandpa|GrandpaKeyType|GRANDPA_ENGINE_ID/i },
  • HighSubstrate Session Keys (multi-key)

    test/substrate-patterns.test.js:26

    Await Polkadot PQC session key migration RFC

    Raw evidence
    re: /impl_opaque_keys!\s*\{|SessionKeys\s*\{[^}]*(?:babe|grandpa|im_online|authority_discovery)|generate_session_keys|decode_session_keys/i },
  • HighSubstrate Validator Keystore

    test/substrate-patterns.test.js:28

    Monitor substrate-crypto PQC keystore RFC

    Raw evidence
    re: /KeystorePtr|SyncCryptoStorePtr|LocalKeystore::open|keystore\.(?:sr25519_generate_new|ed25519_generate_new|ecdsa_generate_new)|sp_keystore|CryptoStore/i },
  • HighCWE-327ECDSA

    test/substrate-patterns.test.js:30

    ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)

    Raw evidence
    re: /sp_runtime::traits::Verify|MultiSignature|AnySignature|sp_core::(?:sr25519|ed25519|ecdsa)::Signature|(?:Sr25519|Ed25519|Ecdsa)Signature\b/i },

+ 43 more findings in the full report

Scan your own repository

Free. Results in ~90 seconds. CBOM + DORA/NIS2 PDF included.

Start a free scan