AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 15 Bitcoin

feat(common,core,python,tests): support creating Stellar contracts.

Public commit record

What the developer wrote

Authored by Jun Luo

100/100 · Strong
feat(common,core,python,tests): support creating Stellar contracts.

Support `CREATE_CONTRACT_V2` in `InvokeHostFunctionOp` and
`CREATE_CONTRACT_V2_HOST_FN` in Soroban authorization entries.
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Names security-relevant behavior explicitly
The short version

What changed, and why it matters

This commit adds support for a new Stellar blockchain feature: creating smart contracts (contract deployment) on Trezor hardware wallets. It extends the messages, layouts, serialization, and tests so users can review and sign Stellar 'create contract' transactions and related authorization entries. There is no indication of a security vulnerability in the change itself; it is a feature addition with explicit user confirmation steps and deliberate exclusions of unsupported variants.

Recommended action

No security action required. Treat as a normal feature review: verify test coverage, ensure translation strings are signed, and confirm the new confirmation flow matches product requirements.

Security signals we found

01

New transaction type support with on-device user confirmation

02

Explicit rejection of unsupported Stellar Asset Contract deployment and legacy CREATE_CONTRACT

03

Length validation on salt (32 bytes) and wasm_hash (32 bytes)

04

Root authorization entry matching compares serialized XDR of create-contract args

05

No vendor disclosure of security relevance, CVE, or researcher attribution in commit materials

Risk score

Why this scored 15/100

Our methodology →
Potential impact 0/30
Exploitability 0/25
Stealth signal 0/15
Affected reach 0/15
Confidence 10/10
Evidence quality 5/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.