cairo-vulnerability-scanner
trailofbits4.8k installs
Find security flaws in Cairo smart contracts.
What it does
Checks Cairo/StarkNet smart contracts for six security vulnerability patterns and returns cited findings with recommended fixes.
When to use it
Use when auditing StarkNet contracts, reviewing bridges or signature verification, or assessing applications before launch.
How to use it
Give it a Cairo/StarkNet codebase; it returns a vulnerability report with coverage verdicts, file references, severity, and recommended fixes.
What you provide
- An existing project
Latest review
What you need · 2
Requires the Caracal static analyzer for the workflow's contract scan.
Uses ripgrep to search contract source for felt252 arithmetic and balance or amount storage.
Access · 0
No additional actions listed.