🚨 [CRITICAL] v1 Deploy Route Uses Simulated Deployment Instead of Real Soroban CLI

[ayomideadeniran]

Description

The /api/v1/deploy endpoint in backend/src/routes/v1/deploy.js uses a simulated deployment that generates random contract IDs with Math.random() and setTimeout() instead of actually invoking the Soroban CLI.

Location

backend/src/routes/v1/deploy.js (lines 62-83)

Issue

// For the MVP, if no actual network configs/keys are present,
// we simulate the deployment response.
setTimeout(() => {
  const contractId =
    "C" + Math.random().toString(36).substring(2, 54).toUpperCase();
  // ...
}, 1500);

Impact

Despite the README claiming contracts are deployed to the Stellar Testnet, this route never actually executes soroban contract deploy. The real deployContract() function exists in backend/src/services/deployService.js but is never called by this route.

Required Fix

Replace the simulated deployment with a call to the real deployContract() function from deployService.js, which properly invokes the Soroban CLI via child process.

Reference

Identified during full codebase audit of soroban-playground monorepo.

[Martins-594]

@Martins-594 has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Hello Maintainer, I'd like to volunteer for this issue. I've read the description and I'm confident in delivering a solid fix.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Martins-594 to this issue.

[drips-wave]

Congratulations, @Martins-594! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on July 30, 2026.

🧑‍💻 @Martins-594: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊