KitScout

Categories › Security › Code & dependency scanning

web3-audit

SkillInstall · skills CLI

Smart contract security audit — 10 DeFi bug classes (accounting desync, access control, incomplete path, off-by-one, oracle, ERC4626, reentrancy, flash loan, signature replay, proxy), pre-dive kill signals (TVL < $500K etc), Foundry PoC template, grep patterns for each class, and real Immunefi paid examples. Use for any Solidity/Rust contract audit or when deciding whether a DeFi target is worth hunting.

Install

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

  • ponytail-audit 190,107 ★
    Quality audit of the whole repo: bugs, security, real load, missing tests, speed, and what to delete. Most imp
  • ponytail-debt 190,107 ★
    Harvest every shortcut: comment into one debt ledger, so deferrals get tracked instead of forgotten. One-shot
  • security-and-hardening 117,009 ★
    Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling us
  • deal-with-security-advisory 113,555 ★
    Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, pr
  • html-ppt-knowledge-arch-blueprint 107,474 ★
    OpenDesign's incident retro: the daemon-restart data bug, the root cause, the fix, and the systemic follow-ups