A curated list of AI tools for smart-contract security. Built and maintained by pashov.com.
How to choose:
- 🛠️ Want something you install and run yourself? → Free & Open Source
- 💼 Want a managed platform or service? → Paid & Closed Source
- 🔤 Looking for your language? → jump straight from the Contents below.
⭐ = featured pick
Free & Open Source — Solidity / EVM (17) · Vyper (2) · Rust / Solana (5) · Move/Sui (5) · ZK / Circom (1) · Multi-Language (29)
Paid & Closed Source — Solidity / EVM (8) · Rust / Solana (2) · Multi-Language (25)
| Tool | What it does |
|---|---|
| ⭐ pashov/skills | Full multi-pass Solidity audit skill |
| 0xsimao/0xsimao-ai | Accounting-first Solidity audit skill, 12 parallel lenses |
| Archethect/sc-auditor | Smart-contract security auditor skill |
| auditmos/skills | Smart-contract security audit skills |
| cameronkarthik/base-audit-bot | Audit bot tuned for Base contracts |
| CDSecurity/cdsecurity-skills | Claude Code skills for contract security |
| cholakovvv/foundry-poc-mainnet-fork | Generates Foundry mainnet-fork PoCs |
| Cyfrin/solskill | Secure-dev guardrails while you write Solidity |
| DarkNavySecurity/contract-auditor | Smart-contract audit skill |
| GPTScan | GPT + static analysis to catch logic bugs |
| kadenzipfel/scv-scan | Scans for common contract vulnerabilities |
| Kann AI | Web3 Security Model for Solidity Auditing |
| melanke/defi-spec-driven | DeFi protocol design with threat-modeling |
| monad-developers/ultrafuzz | Agentic Solidity fuzzing and threat-hunting orchestrator with local dashboard and report |
| quillai-network/qs_skills | QuillAI security audit skills |
| TarasBrilian/gebug-audit | EVM audit workflow for Claude Code with AI-driven findings and Foundry PoC validation |
| zerocoolailabs/ZeroSkills | Vulnerability detector skill |
| Tool | What it does |
|---|---|
| rafael-abuawad/fyzz | Generates stateful Vyper fuzz suites with Hypothesis |
| rafael-abuawad/vyper-auditor | Full multi-pass Vyper audit skill |
| Tool | What it does |
|---|---|
| 0xCyrildev/dot | Agentic Solana upgrade blast-radius analysis from CPI traces, not source |
| Frankcastleauditor/safe-solana-builder | Secure Rust/Solana development guardrails |
| galacticcouncil/cl0wdit | Rust AI auditor embedded in a node repo |
| TodorBonchev/rust-auditor | Multi-agent audit skill for Solana programs (Anchor, native, Pinocchio) |
| zzzuhaibmohd/solana-token-extensions-security | Audits Solana Token-2022 extensions |
| Tool | What it does |
|---|---|
| 0xCyrildev/Chase | Agentic dynamic analysis of executed Sui Move transactions |
| exvulsec/sui-move-skill | Autonomous Sui Move security audit skill for Codex |
| kaveyjoe/SUIZERO | AI security audits for Sui Move |
| pantheraudits/move-auditor | Move smart-contract auditor |
| sanbir/move-auditor-skills | Audit skills for Move contracts |
| Tool | What it does |
|---|---|
| zksecurity/zk-skills | Soundness, completeness and constraint review of Circom circuits |
29 tools — click to expand
| Tool | What it does |
|---|---|
| 0xiehnnkta/nemesis-auditor | Adversarial security-audit agent skill |
| 0xRayaa/scoping-bee | AI pre-audit scoping assistant |
| 33Audits/cca-audit-agent | Uniswap CCA audit agent |
| adshao/flounder | Security automation for target prep, audit, exploit construction, and execution proof |
| aeonfun/aeon | Agent framework with sc-audit (invariant-first Solidity audits, fuzz proofs) and vuln-scanner |
| bountyoperator/bounty-operator | Pre-submission review skills and MCP server for bounty reports |
| BradMoonUESTC/finite-monkey-engine | AI engine for smart-contract audits |
| digger-determsec/digger | Evidence-gated multi-language smart-contract analyzer |
| forefy/.context | Security audit skills bundle |
| Gabson0x/bountyforge | Parallel bug-bounty agents for EVM, Move, Solana, TRON |
| gdroz3r/drozer-lite | Smart-contract vulnerability scanner |
| hackenproof-public/skills | Bug-bounty triage skills |
| han-sec/trident-fuzz-skill | Fuzzing skill (Trident) |
| heavyw8t/The-Judge | Judges and scores audit findings |
| itsdarktoday/auditcode | Autonomous multi-agent audit harness with static tools and Foundry PoCs |
| J4X-Security/K.I.T | Reports already-known findings |
| JoranHonig/grimoire | Co-auditor skill that pairs with you |
| konstantinvelev/AI | Collection of Claude Code security skills |
| Kritt-ai/open-kritt | Orchestrates AI agents to find real vulnerabilities in code |
| marchev/claudit | Security findings reporting skill |
| Monethic/monethic-maia | Maia AI auditor |
| OpenZeppelin/openzeppelin-skills | Secure development skills from OpenZeppelin |
| PlamenTSV/plamen | Autonomous web3 audit agent |
| RASHMOR1/dlt-auditor | Audit skill for DLT systems |
| scabench-org/hound | Language-agnostic AI auditor |
| shuvonsec/claude-bug-bounty | AI-assisted bug-bounty hunting |
| slvDev/weasel | Solidity static analyzer you can talk to |
| trailofbits/skills | Security dev & testing skills from Trail of Bits |
| ZealynxSecurity/krait | AI-first smart-contract auditor |
| Tool | What it does |
|---|---|
| AuditBase | Smart-contract scanner |
| Firepan | Security orchestration platform |
| Octane | AI security engineer for Solidity/EVM |
| One Dollar Audit | AI Solidity audit report for a flat $1 |
| Solarizer | AI security engine |
| SolidityScan | Smart-contract scanning tool |
| Veritas Protocol | AI security protocol |
| Zellic V12 | Autonomous EVM auditor |
| Tool | What it does |
|---|---|
| HackHack | Autonomous Solana security reviews with runnable proof-of-concept exploits |
| TNT House Risk-Data API | Solana token risk scoring & on-chain insider-cluster detection API for AI trading agents |
25 tools — click to expand
| Tool | What it does |
|---|---|
| Almanax | AI security engineer |
| AuditHub | Automated security scanner |
| Auron | Autonomous AI security researcher |
| Bunzz | AI smart-contract audits |
| Cantina Apex | Enterprise AI code analyzer |
| Cecuro | AI smart-contract auditing platform |
| CertiK AI Auditor | AI auditor for Solidity, Move and Solana Rust |
| ChainGPT Auditor | AI smart-contract auditor |
| Critikalai | AI security analysis |
| GregoAI | AI security platform |
| Guardix | AI-powered audits |
| Hakira | AI security platform |
| Kritt.ai | AI security built for blockchains |
| Nethermind AuditAgent | AI audit agent from Nethermind |
| Olympix | Pre-deployment security tooling |
| Redvolt.ai | AI security auditor |
| Savant Chat | Chat-based AI security audits |
| Sherlock Audit Engine | Coordinated security review across LLMs, AI auditors and human researchers |
| SherlockAI | Security analysis agent |
| Testmachine | AI security testing |
| Wake Arena | Vulnerability scanner |
| webrainsec | AI-augmented contract security |
| Winfunc | Autonomous AI-native security audits |
| Zerodrift | Autonomous security tool |
| zkao | AI crypto audits |