Security Best Practices

A series of guides and documentation to help developers build safe and secure products on Stellar.

🗃Threat Modeling

4 items

📄️On-Chain Monitoring Plan Template (Builders)

This template turns a completed threat model into an operational monitoring plan for a protocol or set of smart contracts on Stellar. Where the threat model asks: "What could go wrong and how will we design against it?", this plan asks "How will we watch for it in production?" Each threat you identified becomes one or more observable on-chain effects, and each effect becomes a rule your monitoring solution watches while your contracts are live.

📄️Position Monitoring Plan Template (Users)

This template helps you — as someone holding positions on Stellar — set up monitoring for what you own, without needing a formal threat model. Fill in one row per position or wallet you care about: what could go wrong, when you want to be alerted, and what you'll do about it.

📄️Securing Web-Based Projects

Any application managing cryptocurrency is a frequent target of malicious actors and needs to follow security best practices. The below checklist offers guidance on the most common vulnerabilities. However, even if you follow every piece of advice, security is not guaranteed. Web security and malicious actors are constantly evolving, so it’s good to maintain a healthy amount of paranoia.