[Research] Catalog Top 5 Soroban "Danger Signatures"

[mijinummi]

Title: [Research] Catalog Top 5 Soroban "Danger Signatures" for Monitoring

📝 Description

Sentinel needs to know what to look for! We need to research and document the most common malicious function calls or state changes in the Stellar/Soroban ecosystem.

🎯 Goal

Populate a signatures/soroban.json file with patterns that indicate a potential attack.

✅ Examples to Research:

1. Unauthorized set_admin calls.
2. Sudden large-scale transfer calls from vault contracts.
3. Unexpected contract upgrade signatures.
4. "Emergency Pause" trigger patterns.

🛠 Technical Specs

• Difficulty: Easy (Non-Technical)
• Labels: good-first-issue, research, security