ChainAuditBETA
Sign In
AI-Powered Static Analysis

Audit Smart
Contracts

Upload a Solidity file, Solana Rust program, or a zip of multiple contracts. Get a comprehensive security report with risk scores and actionable fixes.

EthereumArbitrumOptimismBasePolygonSolana

Drop your .sol, .rs or .zip file here

or click to browse

Solidity .sol·Solana .rs·Multi .zip
Results in Under 2 Min
Uploads Deleted After Scan
50+ Vulnerability Rules

Three bugs, thirteen lines.

This vault compiles, passes its tests, and loses every deposit. Select a finding to see the lines that cause it.

Vault.sol
1// SPDX-License-Identifier: MIT
2pragma solidity ^0.8.24;
3
4contract Vault {
5 mapping(address => uint256) public balances;
6
7 function withdraw(uint256 amount) external {
8 require(tx.origin == owner, "not authorised");
9 (bool ok, ) = msg.sender.call{value: amount}("");
10 balances[msg.sender] -= amount;
11 token.transfer(msg.sender, amount);
12 }
13}

Every finding traces back to a rule.

A scanner that cannot explain itself is a scanner you cannot act on. Each report names the rule that fired, why it scored what it did, and the fix.

  • Slither-backed, not regex-guessed

    EVM scans run Slither and map its detectors onto 30 curated rules. Checks that do not map to a rule are dropped rather than surfaced as noise, and duplicates collapse to one finding with an occurrence count.

    Rule mapping
    51 Slither detectors mapped→ 30 rules, each with CVSS factorsunmapped checks discarded

  • A risk score you can recompute

    Each finding scores as CVSS base × confidence weight × severity multiplier. The sum is normalised across a curve, so twenty low findings never outrank one critical.

    Score function
    Σ (cvss × conf × sev)100 × (1 − e^(−total/80))non-empty findings floor at 5

  • Solidity and Solana, one upload

    Drop a zip of mixed contracts. Each file is routed by content, not extension — Solidity through Slither, Rust through cargo-audit, a pattern pass and cargo-geiger.

    Router
    .sol → slither → 30 rules.rs → cargo-audit + 23 rules8 chains detected from source