Ready to run
Download
Get the ready-to-use version for Windows or Linux.
Conformance and security checks for SEP-56 vaults on Stellar.
Built for
safer vaults.
Aegis Vault helps developers test core vault functions and common security risks before their vault reaches users — with clear results in minutes.
- 11Automated checksDeterministic verification
7 conformance4 security
- Live on Soroban TestnetStellar Testnet
Why Aegis Vault
Vaults are simple.
Until one thing goes wrong.
Small mistakes in vault logic can become expensive problems. We help catch issues in core vault behavior and common security risks before they reach users.
- Attacker donates directly
- Share price jumps
- Next deposit mints ~0 shares
Why it matters
An attacker donates assets directly to an empty vault to inflate the share price, so the next real depositor's shares round down toward zero and their deposit is absorbed.
What Aegis checks
Donation / inflation attack resistance
donation_attackTests vulnerability to direct-donation share-price manipulation.
- Expected value
- Rounded value drifts
- The gap is the loss
Why it matters
Share math must round in the vault's favor on every operation. If it ever rounds toward the user instead, that's a slow, repeatable drain — not a one-time bug.
What Aegis checks
Rounding direction safety
rounding_directionConfirms rounding always favors the vault, never the attacker.
- Extreme input
- Approaches the integer limit
- Stopped before it wraps
Why it matters
Extreme inputs should fail cleanly. A vault that panics into a corrupted state, or silently wraps a huge number, can leave funds unrecoverable or wrongly accounted for.
What Aegis checks
Overflow protection
overflow_protectionTests handling of extreme values without overflow/crash.
- Unauthorized caller
- Authorization check
- Vault stays closed
Why it matters
Soroban requires explicit authorization checks. A vault that lets an unapproved operator move someone else's shares has no access control, no matter what the interface promises.
What Aegis checks
Access control probing
access_control_probingConfirms sensitive functions are properly authorization-gated.
Try Aegis Vault
Start where you are.
Explore Aegis with a test vault, or run the checks against your own.
Just exploring?
Watch the walkthrough or run checks on a sample vault.
No contract address required.
No report yet
Run a demo or check your vault to see results.
Security checks (4)
- Donation / inflation attack resistance
- Overflow protection
- Rounding direction safety
- Access control probing
Conformance checks (7)
- Total assets accounting
- Deposit conformance
- Mint conformance
- Withdraw conformance
Integrate
Keep us close while you build.
Run it locally and check your vault throughout development.
For developers
Build from Source
Clone the code from GitHub and build it on your machine.
git clone https://github.com/SkyBreak1927/sep56-vault-guard.gitcd sep56-vault-guardcargo build --release -p sep56-vault-guard