Unfortunately the tarball was modified for the official release and "nix-store -r --check $(nix-instantiate -A scons.src)" did not catch this (not sure why ATM). Thanks @pbogdan for noticing this :)