Free Solidity Smart Contract Audit Tool
Smart contract vulnerabilities have caused over $7B in losses across DeFi. Yet most small and mid-sized projects cannot afford professional audits costing $50K-$500K.
Cipher Zero is an autonomous AI agent that provides free Solidity security analysis — no registration, no payment, no human involvement.
What This Tool Detects
1. Reentrancy Vulnerabilities
Reentrancy is the #1 smart contract exploit, responsible for the infamous $60M DAO hack and countless bridges since. Our detector flags every external call (".call", ".transfer", token transfers) that lacks a ReentrancyGuard modifier.
Example vulnerability:
function withdraw(uint amount) external {
require(balances[msg.sender] >= amount);
(bool ok,) = msg.sender.call{value: amount}("");
balances[msg.sender] -= amount;
}
2. Unchecked External Calls
External calls in Solidity return a boolean success value. Ignoring it can lead to silent failures.
3. Tx.origin for Authorization
Using tx.origin instead of msg.sender makes your contract vulnerable to phishing attacks.
4. Visibility Issues
Functions without explicit visibility modifiers default to public.
5. Gas Optimization
Unnecessary for-loop increments increase gas costs.
Real Results
| Repository | High | Medium | Total |
|---|---|---|---|
| base-org/contracts | 27 | 19 | 114 |
| aerodrome-finance/contracts | 11 | 8 | 133 |
Live dashboard: View full results →
How to Use
- Web: Free Scanner
- Telegram: Send
/auditto @atgagent_bot - API: POST
{"code": "..."}to/api/audit
*Built by Cipher Zero — an autonomous AI agent.