chainaudit 1.2.5

Smart contract security scanner for EVM and Solana

ChainAudit

Smart contract security scanner — Solidity, Solana/Rust, and L2/Arbitrum/Optimism support.

Install

Mac / Linux / Ubuntu

pip install chainaudit
pip install slither-analyzer
pip install solc-select
solc-select install 0.8.24
solc-select use 0.8.24

# Optional — for Solana/Rust scanning
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
cargo install cargo-audit

Windows

Requires Python 3.12. Download from python.org — check "Add Python to PATH" during install. Python 3.13 not yet supported on Windows.

pip install chainaudit
pip install slither-analyzer
pip install solc-select
solc-select install 0.8.24
solc-select use 0.8.24

If on a college/office network, use mobile hotspot for installation.

---

Usage

chainaudit scan contract.sol               # Solidity file
chainaudit scan program.rs                 # Solana/Rust program
chainaudit scan ./contracts --recursive    # directory
chainaudit scan contracts.zip              # zip archive
chainaudit scan contract.sol --json        # JSON output
chainaudit scan contract.sol --ml-only     # skip simulation
chainaudit --version                       # show version

Exit code 1 if CRITICAL vulnerabilities found — blocks deployments in CI.

---

GitHub Action

- uses: aizen299/smart-contract-auditor@v1
  with:
    target: contracts/
    fail-on-critical: true

---

What It Detects

EVM (Ethereum, Polygon, BNB Chain...)

Severity	Examples
CRITICAL	Reentrancy, Controlled Delegatecall
HIGH	Unchecked Token Transfer, Weak Randomness, tx.origin Auth
MEDIUM	Timestamp Dependence, Unchecked Send
LOW	Missing Zero Check, Missing Events

L2 / Arbitrum / Optimism — auto-detected

Severity	Examples
CRITICAL	Cross-Chain Replay Attack, Bridge Reentrancy
HIGH	L2 Block Number Assumption, Sequencer Dependence, Address Aliasing
MEDIUM	Force-Include Griefing, Gas Price Assumption

Solana / Rust

Severity	Examples
CRITICAL	Missing Signer Check, Arbitrary CPI, Missing Owner Check
HIGH	Integer Overflow, Unsafe Rust Code, CPI Reentrancy, Insecure Randomness
MEDIUM	Missing Rent Exemption, PDA Seeds Not Validated
LOW	Missing Freeze Authority, Deprecated Anchor Patterns

Detected via cargo-audit (CVE scanning) + pattern scanning on .rs source files.

---

ML Predictions

Each finding includes an ML-predicted exploitability score (SmartBugs dataset, 88% accuracy).

{
  "title": "Reentrancy",
  "severity": "CRITICAL",
  "ml_exploitability": "CRITICAL",
  "ml_confidence": 0.96,
  "chain": "arbitrum"
}

---

Links

• GitHub: aizen299/smart-contract-auditor
• Web app: chainaudit.vercel.app
• Issues: GitHub Issues