quantumscan-io/scanner-core

Scanned on Jun 26, 2026

Risk score/ 100

Clean

Summary

This repository contains a post-quantum cryptography scanner tool with 44 high-severity detections, but all findings are located exclusively in test files (substrate-patterns.test.js) that define detection patterns for Substrate/Polkadot blockchain cryptographic primitives. No production code uses quantum-vulnerable algorithms; the repository implements a security scanner, not vulnerable cryptography.

Critical

High

Medium

Low

Top findings

HighCWE-327X25519 / Curve25519
test/substrate-patterns.test.js:55
ML-KEM (CRYSTALS-Kyber)
Raw evidence
```
{ id: "substrate-x25519-dalek",
```

HighCWE-327secp256k1 (Bitcoin curve)

index.js:68

Raw evidence

{ id: "ethers-wallet",       name: "ethers.js Wallet (secp256k1)",

HighCWE-327Ed25519 / EdDSA
test/substrate-patterns.test.js:13
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA
Raw evidence
```
*   5. schnorrkel / ed25519-dalek / x25519-dalek / libp2p-noise
```
HighBABE Authority Key (sr25519)
test/substrate-patterns.test.js:22
ML-DSA (CRYSTALS-Dilithium) via sp-core PQC extension when standardized
Raw evidence
```
re: /BabeId|babe_generate_session_keys|sr25519::(?:Public|Pair|Signature)\b|app_crypto!\s*\(.*sr25519|BabeAuthorityId|BabeKeyType/i },
```

HighCWE-327Ed25519 / EdDSA

test/substrate-patterns.test.js:24

ML-DSA (CRYSTALS-Dilithium) or SLH-DSA

Raw evidence

re: /GrandpaId|grandpa_generate_session_keys|ed25519::(?:Public|Pair|Signature)\b|GrandpaAuthorityId|AuthorityList.*grandpa|GrandpaKeyType|GRANDPA_ENGINE_ID/i },

+ 43 more findings in the full report

Scan your own repository

Free. Results in ~90 seconds. CBOM + DORA/NIS2 PDF included.

Start a free scan