Skip to content
QuantumScanRelatório público de scan

Repositório

quantumscan-io/scanner-core

Escaneado em 26 de jun. de 2026

18

Risk score/ 100

Limpo

Resumo

This repository contains comprehensive test fixtures for detecting Substrate and Polkadot blockchain cryptographic patterns including sr25519, ed25519, ECDSA, and X25519. All 48 findings are located exclusively in test files (test/substrate-patterns.test.js) as regex pattern definitions, not production cryptographic implementations. No actual vulnerable cryptographic code is present.

Crítico

0

Alto

44

Médio

4

Baixo

0

Principais findings

  • AltoCWE-327Ed25519 / EdDSA

    test/substrate-patterns.test.js:24

    ML-DSA (CRYSTALS-Dilithium) or SLH-DSA

    Evidência
    re: /GrandpaId|grandpa_generate_session_keys|ed25519::(?:Public|Pair|Signature)\b|GrandpaAuthorityId|AuthorityList.*grandpa|GrandpaKeyType|GRANDPA_ENGINE_ID/i },
  • AltoSubstrate Validator Keystore

    test/substrate-patterns.test.js:28

    Monitor substrate-crypto PQC keystore RFC

    Evidência
    re: /KeystorePtr|SyncCryptoStorePtr|LocalKeystore::open|keystore\.(?:sr25519_generate_new|ed25519_generate_new|ecdsa_generate_new)|sp_keystore|CryptoStore/i },
  • AltoCWE-327ECDSA

    test/substrate-patterns.test.js:30

    ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)

    Evidência
    re: /sp_runtime::traits::Verify|MultiSignature|AnySignature|sp_core::(?:sr25519|ed25519|ecdsa)::Signature|(?:Sr25519|Ed25519|Ecdsa)Signature\b/i },
  • AltoCWE-327ECDSA

    test/substrate-patterns.test.js:32

    ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)

    Evidência
    re: /sp_core::crypto::|sp_core::(?:sr25519|ed25519|ecdsa)::|use sp_core::(?:Pair|Public|Signature)|frame_support::crypto::|CryptoTypePublicPair/i },
  • AltoCWE-327ECDSA

    test/substrate-patterns.test.js:34

    ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)

    Evidência
    re: /sp_io::crypto::(?:sr25519_verify|ed25519_verify|ecdsa_verify|sr25519_sign|ed25519_sign|ecdsa_sign)|sp_io::crypto::sr25519_public_keys/i },

+ 43 findings no relatório completo

Escaneie seu próprio repositório

Grátis. Resultados em ~90 segundos. CBOM + PDF DORA/NIS2 inclusos.

Começar scan grátis