Detect Unprotected Soroban Upgrade Functions

[mijinummi]

🧠 Concept

Detect upgrade functions without appropriate access control.

⚠️ Problem

Unauthorized upgrades can replace contract behavior with malicious or unintended implementations.

📁 Implementation Scope

• packages/rules/soroban/upgrades/
• packages/analyzers/soroban/security/

✅ Requirements

• Identify upgrade functions
• Analyze authorization
• Detect missing access controls
• Assign security severity

🎯 Acceptance Criteria

• Upgrade functions detected
• Authorization validated
• Unprotected upgrades reported
• Security tests added

[ReinaMaze]

GM Maintainer, Can I get assigned to work on this?

I’ll implement the Soroban upgrade-function analyzer, validate authorization controls, flag unprotected upgrades with the appropriate security severity, and add coverage for the detection logic.

ETA: 10 hours

[AKAEMM668]

@AKAEMM668 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi Maintainer! I’m interested in contributing to this task and can work toward delivering a clean solution on time.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @AKAEMM668 to this issue.

[JesseJohn7]

@JesseJohn7 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

I would love to work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @JesseJohn7 to this issue.

[Muyideen-js]

@Muyideen-js has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi, I can fix this

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Muyideen-js to this issue.

[giadagallo]

@giadagallo has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hello, can i work on this issue ?

ℹ️ Repo Maintainers: To accept this application, review their application or assign @giadagallo to this issue.

[drips-wave]

Congratulations, @giadagallo! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on August 31, 2026.

🧑‍💻 @giadagallo: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊