SolidityGuard - Solidity/EVM智能合约安全审计师— 104

项目说明

<h1 align="center">SolidityGuard</h1>

<p align="center">
<strong>Ad Solidity/E contract security auditor</strong>
</p>

<p align="center">
<a href=" src=" alt="CI" /></a>
<a href=" src=" alt="Latest Release" /></a>
<a href=" src=" alt="Web App" /></a>
<a href="LICENSE"><img src=" alt="License" /></a>
</p>

<p align="center">
<img src=" alt="104 Patterns" />
<img src=" alt="9 Tools" />
<img src=")-brightgreen?style=flat-square" alt="CTF 85/85 100%" />
<img src=" alt="DeFi 100%" />
<img src=" alt="Paradigm CTF 100%" />
<img src=" alt="2025 CTFs 100%" />
<img src=")-brightgreen?style=flat-square" alt="E 120/120" />
<img src=" alt="OWASP 2025" />
</p>

<p align="center">
<a href=" it now</a> &middot;
<a href="#quick-start">Quick Start</a> &middot;
<a href="#04">104 Patterns</a> &middot;
<a href=" &middot;
<a href="#contributing">Contributing</a>
</p>

---

> Try it now at solidityguard.altllm.ai — scan your Solidity contracts instantly from your browser, no installation required.

> Need a professional, in-depth audit for your protocol? Contact us at — we offer comprehensi + AI-assisted security reviews tailored to your codebase.

Features

Benchmark Results

| Benchmark | Scope | Detection Rate |
|-----------|-------|----------------|
| DeFi | 56 contracts, 59 patterns | 100% (56/56) |
| Paradigm CTF 2021 | 16 challenges | 100% (10/10 static) |
| Paradigm CTF 2022 | 13 challenges | 100% (7/7 static) |
| Paradigm CTF 2023 | 15 challenges | 100% (7/7 static) |
| R3CTF 2025 | 2 Solidity challenges | 100% (2/2) |
| HTB Cyber Apocalypse 2025 | 3 blockchain challenges | 100% (3/3) |
| Combined | 85 challenges | 85/85 (100%) |
| E | 40 audits, 120 | 120/120 (100%) |

E Leaderboard

E (OpenAI, 2025) e AI agents on real-world smart contract security across 40 audit codebases from Code4rena and Sherlock contests (120 high-se , 3 modes: Detect / Patch / Exploit).

SolidityGuard's pattern scanner achieves 100% ground-truth co — detecting all 120 across all 40 audits in 7.4 seconds. This scanner output is used as pre-scan input for the SolidityGuard agent.

Detection — E Ground Truth (120 vulns, 40 audits)

Full results (from E paper, Table 9):

| Model | Scaffold | Detect | Patch | Exploit |
|-------|----------|--------|-------|---------|
| SolidityGuard | Claude Code | 100.0% * | — | — |
| Claude Opus 4.6 | Claude Code | 45.6% | 25.9% | 61.1% |
| GPT-5.3-Codex | Codex (xhigh) | 39.2% | 41.5% | 72.2% |
| GPT-5.2 | Codex (xhigh) | 39.2% | 39.3% | 62.5% |
| Claude Opus 4.5 | Claude Code | 36.1% | 21.5% | 50.9% |
| GPT-5.2 | OpenCode | 30.0% | 35.6% | 51.4% |
| GPT-5 | Codex | 23.3% | 20.0% | 31.9% |
| Gemini 3 Pro | Gemini CLI | 20.8% | 10.4% | 36.1% |
| o3 | Codex | 10.6% | 14.8% | 18.1% |

\* SolidityGuard Detect score is scanner-le pattern co (120/120 vulns detected analysis). E agent Detect scores are from LLM-judged audit reports. SolidityGuard's scanner is used as a pre-scan input to boost the agent's audit co.

Quick Start

Web (Fastest)

Visit solidityguard.altllm.ai to start scanning immediately — no setup needed.

Docker (Recommended)

The desktop app auto-detects Docker and runs scans locally — your code ne your machine.

CLI

Desktop

Download from Releases — a for macOS (.dmg), Windows (.msi, .exe), and Linux (.AppImage, .deb).

Or build from source:

Desktop app scans contracts locally using installed tools (slither, aderyn) or Docker as fallback — no backend ser.

Web (Self-Hosted)

CI/CD Integration

Add SolidityGuard to your GitHub Actions workflow:

See .github/workflows/ci.yml for a complete example.

Slash Commands (Claude Code Agent)

---

Patterns (104)

| Category | IDs | Count | Examples |
|----------|-----|-------|----------|
| Reentrancy | ETH-001–005 | 5 | Single, cross-function, cross-contract, read-only |
| Access Control | ETH-006–012 | 7 | Missing auth, tx.origin, unprotected selfdestruct |
| Arithmetic | ETH-013–017 | 5 | O, precision loss, di ordering |
| External Calls | ETH-018–023 | 6 | Unchecked return, delegatecall, DoS |
| Oracle & Price | ETH-024–028 | 5 | Oracle manipulation, flash loans, MEV |
| Storage & State | ETH-029–033 | 5 | Uninitialized storage, proxy collision |
| Logic Errors | ETH-034–040 | 7 | Strict equality, timestamp, signatures, front-running |
| Token Issues | ETH-041–048 | 8 | Fee-on-transfer, rebasing, ERC-777 hooks |
| Proxy & Upgrade | ETH-049–054 | 6 | Uninitialized impl, storage mismatch, selector clash |
| DeFi Specific | ETH-055–065 | 11 | Go, liquidation, vault inflation, AMM |
| Gas & DoS | ETH-066–070 | 5 | Unbounded loops, block gas limit |
| Miscellaneous | ETH-071–080 | 10 | Floating pragma, hash collision, compiler |
| Transient Storage | ETH-081–085 | 5 | TSTORE collision, reentrancy bypass, delegatecall |
| EIP-7702 / Pectra | ETH-086–089 | 4 | tx.origin bypass, delegation, cross-chain replay |
| Account Abstraction | ETH-090–093 | 4 | UserOp collision, paymaster, bundler, |
| Modern DeFi | ETH-094–097 | 4 | Uniswap V4 hooks, cached state desync, compiler bugs |
| Input | ETH-098–099 | 2 | Missing bounds checks, unsafe ABI decoding (OWASP #4) |
| Off-Chain & Infra | ETH-100–101 | 2 | EIP-7702 phishing, UI/signer compromise (Bybit-style) |
| Restaking & L2 | ETH-102–104 | 3 | Cascading slashing, sequencer deps, message replay |

Architecture

Tool Integration

| Tool | Type | Speed | Purpose |
|------|------|-------|---------|
| Slither | Static analysis | < 1 sec | 90+ built-in detectors |
| Aderyn | Static analysis (Rust) | Sub-second | 100+ detectors |
| Mythril | Symbolic execution | Minutes | Deep path analysis |
| Echidna | Property-based fuzzing | 3K+ tx/sec | Custom in |
| Medusa v1 | Co fuzzing | Parallel | Trail of Bits |
| Foundry v1.0 | Test + fuzz + fork | Fast | In tests |
| Halmos | Formal | Minutes | a16z symbolic testing |
| Certora | Formal | Minutes | C |
| E | Audit benchmark | | 40 audits, 120 vulns |

7-Phase Deep Audit

OWASP Smart Contract Top 10 (2025)

| Rank | Category | Co |
|------|----------|----------|
| #1 | Access Control ($953M in 2024) | ETH-006–012, ETH-049–054, ETH-086–093, ETH-100–101 |
| #2 | Oracle Manipulation | ETH-024–028, ETH-094–096 |
| #3 | Logic Errors | ETH-034–040, ETH-097 |
| #4 | Input | ETH-098–099 |
| #5 | Reentrancy | ETH-001–005, ETH-044, ETH-081, ETH-083 |
| #6 | Unchecked Returns | ETH-018–023 |
| #7 | ME | ETH-026, ETH-040, ETH-060 |
| #8 | Arithmetic | ETH-013–017 |
| #9 | Unsafe Delegatecall | ETH-019, ETH-030, ETH-084 |
| #10 | Denial of Service | ETH-066–070 |

Exploit Case Studies

| Incident | Loss | Root Cause | Pattern |
|----------|------|------------|---------|
| Bybit | $1.5B | Safe{Wallet} UI compromise | ETH-101 |
| Ronin Bridge | $625M | Missing access control | ETH-006 |
| BNB Bridge | $570M | Signature | ETH-038 |
| Wormhole | $326M | Missing | ETH-006 |
| Parity Wallet | $280M | Uninitialized proxy | ETH-049 |
| Euler Finance | $197M | Donation attack | ETH-058 |
| Nomad Bridge | $190M | Uninitialized storage | ETH-029 |
| Beanstalk | $182M | Flash loan go | ETH-025, ETH-055 |
| Cream Finance | $130M | Oracle manipulation | ETH-024 |
| Balancer V2 | $128M | Read-only reentrancy | ETH-004 |
| Phemex | $73M | Hot wallet compromise | ETH-006 |
| UPCX | $70M | Unauthorized upgrade | ETH-052 |
| The DAO | $60M | Reentrancy | ETH-001 |
| GMX V1 | $42M | Oracle manipulation | ETH-024 |
| Meta Pool | $27M | Minting bug | ETH-048 |
| Cork Protocol | $11M | V4 hook auth bypass | ETH-094 |

Scripts

| Script | Purpose |
|--------|---------|
| solidity_guard.py | Combined scanner orchestrator (50+ detectors) |
| ctf_benchmark.py | CTF benchmark framework (DeFi + Paradigm CTF + 2025 CTFs) |
| slither_runner.py | Slither integration |
| report_generator.py | Professional Markdown + PDF report |
| .py | Finding prompts |
| e.py | E local benchmark (detect mode, 40 audits, 120 vulns) |
| e.py | E full runner (detect / exploit / patch ) |
| test_scanners.py | Test suite (43 tests) |

All scripts are located in .claude/skills/solidity-guard/scripts/.

Project Structure

Contributing

See CONTRIBUTING.md for de setup and guidelines.

1. Fork the repository
2. Create a feature branch (git checkout -b feature/my-impro)
3. Add patterns, impro rules, or reduce false positives
4. Ensure all tests pass: python3 -m pytest scripts/test_scanners.py -v
5. Submit a Pull Request

Contributions welcome: new pattern detectors, exploit case studies, tool integrations, false positi, and documentation.

Security

Found a in SolidityGuard itself? See SECURITY.md for responsible disclosure.

References

Disclaimer

THIS SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED.

SolidityGuard is an automated security analysis tool and is not a substitute for a comprehensi manual security audit. While SolidityGuard employs 104 patterns and 8 security tools, no automated tool can guarantee the detection of all , bugs, or security issues in smart contracts. New attack , zero-day exploits, and no patterns may not be covered.

Use at your own risk. You are solely responsible for any decisions you make based on SolidityGuard's output, including deploying smart contracts, managing funds, or modifying code. The absence of findings does not certify a contract as secure.

Limitation of liability: To the maximum extent permitted by applicable law, Alt Research Ltd., its directors, officers, employees, agents, and affiliates shall not be liable for any indirect, incidental, special, consequential, or puniti, including but not limited to loss of funds, tokens, digital assets, profits, revenue, or business opportunities arising from the use of this software or reliance on its output.

Indemnification: By using SolidityGuard, you agree to indemnify, defend, and hold harmless Alt Research Ltd. from any claims, liabilities, damages, losses, costs, and expenses arising from your use of the software, your smart contracts, or any reliance on the software's output.

For a professional manual audit, contact .

See the full LICENSE for details.

Donate

If you find SolidityGuard useful:

E / Base / Arbitrum): 0x03978ef315341ed6501c9a571e36695905a0b931

License

Copyright Alt Research Ltd. 2026. All rights reserved. See LICENSE for details.

项目信息

开发语言：Python

Star 数：104

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Solidity/EVM smart contract security auditor — 104 vulnerability patterns, 8 tools, 100% CTF + EVMBench benchmark (120/120)展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。