Auditing Stellar smart contracts requires understanding both application logic and Soroban’s execution model. Drawing on Certora’s audit findings, this article examines authorization, storage lifetime, cross-contract calls, asset accounting, and cross-chain messaging. It shows how inconsistencies between components can strand transfers or prevent message execution, and explains which invariants teams should define before an audit.