Lower TVL = more likely to have exploitable contracts
This tool performs regex-based static analysis with contextual heuristics (visibility, modifiers, CEI order, OZ pattern recognition). It identifies patterns that MAY indicate vulnerabilities — it does NOT confirm exploits. Every finding requires manual verification by a qualified security researcher.
Critical / High findings with High confidence are strong candidates that warrant immediate manual review. Critical / High findings with Medium or Low confidence have been downgraded by the engine — treat them as informational leads, not confirmed bugs.
False positives are possible — especially on contracts with inherited access control (OpenZeppelin base contracts), proxy patterns, or non-standard modifier names. Never submit a finding to any bug bounty platform without a working Proof of Concept that demonstrates the exploit. A failed PoC means the finding was a false positive.
This tool is intended for authorized security research and bug-bounty hunting only. The operators assume no liability for decisions made based on its output.