Skip to content
QuantumScanPublic scan report

Repository

quantumscan-io/scanner-core

Scanned on Jun 26, 2026

18

Risk score/ 100

Clean

Summary

This repository contains comprehensive test fixtures for Substrate/Polkadot blockchain cryptography patterns, including Ed25519, sr25519, ECDSA, and X25519. All 44 high-severity findings are located exclusively in test files (substrate-patterns.test.js and polkadot-patterns.test.js) and represent pattern-matching regular expressions rather than active cryptographic implementations. The repository poses negligible operational quantum risk as it is a scanning tool, not a production cryptographic system.

Critical

0

High

44

Medium

4

Low

0

Top findings

  • HighCWE-327secp256k1 (Bitcoin curve)

    index.js:68

    Raw evidence
    { id: "ethers-wallet",       name: "ethers.js Wallet (secp256k1)",       s
  • HighBABE Authority Key (sr25519)

    test/substrate-patterns.test.js:22

    ML-DSA (CRYSTALS-Dilithium) via sp-core PQC extension when standardized

    Raw evidence
    re: /BabeId|babe_generate_session_keys|sr25519::(?:Public|Pair|Signature)\b|app_crypto!\s*\(.*sr25519|BabeAuthorityId|BabeKeyType/i },
  • HighCWE-327Ed25519 / EdDSA

    test/substrate-patterns.test.js:24

    ML-DSA (CRYSTALS-Dilithium) or SLH-DSA

    Raw evidence
    re: /GrandpaId|grandpa_generate_session_keys|ed25519::(?:Public|Pair|Signature)\b|GrandpaAuthorityId|AuthorityList.*grandpa|GrandpaKeyType|GRANDPA_ENGINE_ID/i },
  • HighSubstrate Session Keys (multi-key)

    test/substrate-patterns.test.js:26

    Await Polkadot PQC session key migration RFC

    Raw evidence
    re: /impl_opaque_keys!\s*\{|SessionKeys\s*\{[^}]*(?:babe|grandpa|im_online|authority_discovery)|generate_session_keys|decode_session_keys/i },
  • HighSubstrate Validator Keystore

    test/substrate-patterns.test.js:28

    Monitor substrate-crypto PQC keystore RFC

    Raw evidence
    re: /KeystorePtr|SyncCryptoStorePtr|LocalKeystore::open|keystore\.(?:sr25519_generate_new|ed25519_generate_new|ecdsa_generate_new)|sp_keystore|CryptoStore/i },

+ 43 more findings in the full report

Scan your own repository

Free. Results in ~90 seconds. CBOM + DORA/NIS2 PDF included.

Start a free scan