Detects input validation failures and arithmetic vulnerabilities in smart contracts — the #1 direct exploitation cause at 34.6% of cases. Covers missing zero-checks, precision loss from division-before-multiplication, rounding direction exploitation, ERC4626 inflation attacks, unsafe casting, dust amount exploitation.
★not rated 129▲
+1 6mo agoA
tokens not measured
originalMIT
Detects vulnerabilities in upgradeable proxy smart contracts — storage layout collisions, uninitialized implementations, function selector clashing, and upgrade path safety issues. Covers Transparent, UUPS, Beacon, Diamond (EIP-2535), and Minimal proxy patterns. Critical for the 54.2% of Ethereum contracts that use…
★not rated 129▲
+1 6mo agoA
tokens not measured
originalMIT
Systematic detection of all reentrancy variants in smart contracts — classic, cross-function, cross-contract, and read-only reentrancy. Verifies CEI pattern compliance, traces external call positions relative to state changes, and detects callback-based attack vectors through ERC-777/ERC-1155 hooks.
★not rated 129▲
+1 6mo agoA
tokens not measured
originalMIT
Detects logic vulnerabilities in smart contracts by analyzing guard-state consistency patterns. Uses the Consistency Principle to find functions that bypass security checks (require, modifiers) established by the contract's own patterns.
★not rated 129▲
+1 6mo agoA
tokens not measured
originalMIT
Detects broken mathematical relationships between state variables in smart contracts. Automatically infers invariants (sum, conservation, ratio, monotonic, synchronization) then finds functions that violate them. Catches unauthorized minting, broken tokenomics, and accounting desynchronization.
★not rated 129▲
+1 6mo agoA
tokens not measured
originalMIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: