Detects input validation failures and arithmetic vulnerabilities in smart contracts — the #1 direct exploitation cause at 34.6% of cases. Covers missing zero-checks, precision loss from division-before-multiplication, rounding direction exploitation, ERC4626 inflation attacks, unsafe casting, dust amount exploitation.
Detects vulnerabilities in upgradeable proxy smart contracts — storage layout collisions, uninitialized implementations, function selector clashing, and upgrade path safety issues. Covers Transparent, UUPS, Beacon, Diamond (EIP-2535), and Minimal proxy patterns. Critical for the 54.2% of Ethereum contracts that use…
Systematic detection of all reentrancy variants in smart contracts — classic, cross-function, cross-contract, and read-only reentrancy. Verifies CEI pattern compliance, traces external call positions relative to state changes, and detects callback-based attack vectors through ERC-777/ERC-1155 hooks.
Detects logic vulnerabilities in smart contracts by analyzing guard-state consistency patterns. Uses the Consistency Principle to find functions that bypass security checks (require, modifiers) established by the contract's own patterns.