SEP-56 conformance and security suite for Soroban
Automated Conformance & Economic Security
for Stellar Tokenized Vaults
Aegis Vault runs 11 automated checks against any SEP-56 tokenized vault contract and tells you what passes, what fails, what could not be checked, and why — usually in about a minute.
Suite Real vault behavior tested
Vault math is easy to get wrong, and expensive when it is
A tokenized vault holds user funds behind a handful of arithmetic and authorization rules. Getting any one of them slightly wrong can let an attacker walk away with someone else's deposit.
Donation / inflation attacks
An attacker donates assets directly to an empty vault to inflate the share price, so the next real depositor's shares round down toward zero and their deposit is absorbed.
Rounding the wrong way
Share math must round in the vault's favor on every operation. If it ever rounds toward the user instead, that's a slow, repeatable drain — not a one-time bug.
Missing overflow protection
Extreme inputs should fail cleanly. A vault that panics into a corrupted state, or silently wraps a huge number, can leave funds unrecoverable or wrongly accounted for.
Loose access control
Soroban requires explicit authorization checks. A vault that lets an unapproved operator move someone else's shares has no access control, no matter what the interface promises.
Run the full check suite against any SEP-56 vault
Paste a deployed vault contract address, or load one of the vaults we use to validate the checker itself.
Stellar contract address — starts with "C", 56 characters.
The 7 conformance checks make real deposit, mint, withdraw and redeem calls on the target vault with Testnet funds; only the four security checks use a temporary copy.
Check results
Run a check above to see live results here — all 11 checks appear immediately and update as each one finishes.
Conformance Verification Report
Live Soroban testnet execution
Checks run against the target contract on Soroban testnet through the Stellar CLI, using freshly funded test accounts. Each check reports its own result as soon as it finishes.