quantumscan-io/scanner-core

Scanned on Jun 26, 2026

Risk score/ 100

Clean

Summary

This repository consists entirely of test files validating detection patterns for Substrate/Polkadot cryptographic primitives. All 44 high-severity and 4 medium-severity findings are regex pattern definitions in test code, not actual cryptographic implementations. No production cryptographic code is present in the scanned files.

Critical

High

Medium

Low

Top findings

HighSubstrate Validator Keystore
test/substrate-patterns.test.js:99
Monitor substrate-crypto PQC keystore RFC
Raw evidence
```
test("validator-keystore: detects LocalKeystore::open", () =>
```
HighBABE Authority Key (sr25519)
test/substrate-patterns.test.js:22
ML-DSA (CRYSTALS-Dilithium) via sp-core PQC extension when standardized
Raw evidence
```
re: /BabeId|babe_generate_session_keys|sr25519::(?:Public|Pair|Signature)\b|app_crypto!\s*\(.*sr25519|BabeAuthorityId|BabeKeyType/i },
```

HighCWE-327Ed25519 / EdDSA

test/substrate-patterns.test.js:24

ML-DSA (CRYSTALS-Dilithium) or SLH-DSA

Raw evidence

re: /GrandpaId|grandpa_generate_session_keys|ed25519::(?:Public|Pair|Signature)\b|GrandpaAuthorityId|AuthorityList.*grandpa|GrandpaKeyType|GRANDPA_ENGINE_ID/i },

HighSubstrate Session Keys (multi-key)

test/substrate-patterns.test.js:26

Await Polkadot PQC session key migration RFC

Raw evidence

re: /impl_opaque_keys!\s*\{|SessionKeys\s*\{[^}]*(?:babe|grandpa|im_online|authority_discovery)|generate_session_keys|decode_session_keys/i },

HighSubstrate Validator Keystore

test/substrate-patterns.test.js:28

Monitor substrate-crypto PQC keystore RFC

Raw evidence

re: /KeystorePtr|SyncCryptoStorePtr|LocalKeystore::open|keystore\.(?:sr25519_generate_new|ed25519_generate_new|ecdsa_generate_new)|sp_keystore|CryptoStore/i },

+ 43 more findings in the full report

Scan your own repository

Free. Results in ~90 seconds. CBOM + DORA/NIS2 PDF included.

Start a free scan