1. Important Disclaimer
THIS TOOL IS A RESEARCH ASSISTANT, NOT AN AUTOMATED SECURITY AUDIT TOOL.
The DeFi Exploit Scanner (“the Tool”) performs regex-based static analysis with contextual heuristics to identify patterns that may indicate vulnerabilities in smart contract source code. It does not confirm the existence of exploits. It does not replace a professional security audit, formal verification, or manual code review.
Every finding produced by this Tool requires independent manual verification by a qualified security researcher before any action is taken. Findings that cannot be reproduced with a working Proof of Concept should be treated as false positives and disregarded.
2. Acceptance of Terms
By accessing or using the Tool, you agree to be bound by these Terms of Service (“Terms”). If you do not agree, do not use the Tool. These Terms apply to all users, including free-tier and licensed users.
3. Nature of the Service
- The Tool identifies common vulnerability patterns in publicly available smart contract source code. It does not execute code, interact with live blockchains, or perform dynamic testing.
- The Tool is designed as a triage and research assistant to help security researchers prioritize which contracts to investigate further. It is not designed to be, and should not be used as, a substitute for a comprehensive security audit.
- The Tool uses a fixed set of 26 pattern detectors. It will not detect vulnerabilities outside these patterns, including novel attack vectors, economic exploits, or cross-contract interactions.
- The Tool’s analysis is based solely on publicly available source code at the time of the scan. It cannot account for off-chain components, governance decisions, or changes made after the scan.
4. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, the operators, developers, and licensors of the Tool:
- Disclaim all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement.
- Assume no liability for any direct, indirect, incidental, special, consequential, or exemplary damages arising from the use of or inability to use the Tool, including but not limited to financial losses, loss of funds, missed vulnerability findings, false positives, or decisions made based on the Tool’s output.
- Make no guarantee that the Tool will detect any specific vulnerability, nor that the absence of findings indicates the absence of vulnerabilities. A clean scan result does not mean a contract is safe.
- Are not responsible for any unauthorized use of generated Proof of Concept code. PoC templates are provided for authorized security research only.
5. Authorized Use
- The Tool is intended for authorized security research, educational purposes, and bug-bounty submissions only.
- Generated Proof of Concept code must only be executed against forked test environments (e.g., Foundry
forge test -f), testnets, or contracts where you have explicit authorization to test. - Using the Tool or its output to plan or execute unauthorized attacks on live contracts is strictly prohibited and may violate applicable criminal and civil laws.
6. No Financial Advice
The Tool does not provide investment advice, financial advice, or any recommendation to buy, sell, or interact with any token, protocol, or smart contract. Risk scores and findings are technical observations, not financial assessments. Always conduct your own independent research before making any financial decisions.
7. Intellectual Property
The Tool, its source code, detection patterns, and documentation are the intellectual property of the licensors. Users are granted a limited, non-exclusive, non-transferable license to use the Tool for its intended purpose. Reverse engineering, redistribution, or commercial resale of the Tool without written permission is prohibited.
8. Modifications to Terms
The operators may update these Terms at any time. Continued use of the Tool after updates constitutes acceptance of the revised Terms. Material changes will be noted in the Tool’s version changelog.
9. Contact
For questions about these Terms, please contact the operators through the channel provided at the time of license or purchase.
© 2025 DeFi Exploit Scanner v3.2 — Smart Contract Research & Triage Assistant
This tool is not a substitute for professional security audits.