Software Bill of Materials (SBOM)

A machine readable inventory of the software components, versions, and dependencies included in an application.

A Software Bill of Materials (SBOM) is a structured inventory of the libraries, packages, versions, and other components included in an application. It gives security teams a reliable way to identify where a vulnerable or compromised dependency is deployed.

For DeFi frontends, an SBOM helps teams respond to supply chain incidents without relying on memory or incomplete package searches. When a wallet connector, analytics library, or transitive npm package is compromised, the inventory can show which builds and environments contain the affected version.

An SBOM is most useful when it is generated automatically in CI, tied to a specific release, and checked against current vulnerability data. It complements lockfiles and integrity hashes, but does not replace dependency review or secure release controls.

Articles Using This Term

Learn more about Software Bill of Materials (SBOM) in these articles:

The Weakest Link in DeFi Isn't the Smart Contract — It's the Web App

DNS hijacks, supply chain attacks, and UI social engineering bypass smart contract security entirely. Learn how attackers exploit web apps to drain DeFi protocols and how to stop them.

Feb 28, 2026•15 min read

→

Related Terms

Supply Chain Attack

A security breach that targets dependencies, libraries, or third-party services rather than attacking the protocol directly.

Need expert guidance on Software Bill of Materials (SBOM)?

Our team at Zealynx has deep expertise in blockchain security and DeFi protocols. Whether you need an audit or consultation, we're here to help.

Get a Quote