Skip to content

Back to the catalog

Web3 Security Tools Hub
github.comrepo

Web3 Security Tools Hub

A curated GitHub repo cataloging AI tools for smart-contract security auditing, split into free/open-source and paid/closed-source categories and organized by chain/language: Solidity/EVM, Rust/Solana, Move/Sui, ZK/Circom, and multi-language tools. Maintained by pashov, it's meant as a directory for finding AI-assisted auditing tooling rather than a single tool itself.

TL;DR Curated directory of AI-powered smart-contract security tools, sorted by chain/language and open-source vs. paid.
Open original ↗
Document

What it is

The Web3 Security Tools Hub is a README list of AI tools for smart-contract security, built and maintained by pashov.com. Its header counts are: free and open source has 18 Solidity/EVM, 4 Rust/Solana, 5 Move/Sui, 1 ZK/Circom and 29 multi-language entries. Paid and closed source has 8 Solidity/EVM, 2 Rust/Solana and 25 multi-language entries. Each entry gets a one-line description and no other detail.

What to do

Most free entries are agent "skills" (for Claude Code or Codex) rather than standalone scanners. The page's only featured pick (⭐) is pashov/skills, a multi-pass Solidity audit skill. The page names these entries by need:

  • Solidity/EVM, free: 0xsimao/0xsimao-ai (accounting-first, 12 parallel lenses), cholakovvv/foundry-poc-mainnet-fork (generates Foundry mainnet-fork PoCs), Cyfrin/solskill (secure-dev guardrails while writing), GPTScan (GPT plus static analysis for logic bugs), kadenzipfel/scv-scan (common vulnerabilities), monad-developers/ultrafuzz (agentic fuzzing with local dashboard).
  • Solana, free: TodorBonchev/rust-auditor (multi-agent; Anchor, native, Pinocchio), zzzuhaibmohd/solana-token-extensions-security (Token-2022 extensions), Frankcastleauditor/safe-solana-builder (dev guardrails).
  • Sui Move, free: 0xCyrildev/Chase (dynamic analysis of executed Sui transactions), exvulsec/sui-move-skill (for Codex).
  • ZK, free: zksecurity/zk-skills, which reviews soundness, completeness and constraints of Circom circuits. It is the only ZK entry.
  • Multi-language, free: trailofbits/skills, OpenZeppelin/openzeppelin-skills, JoranHonig/grimoire (co-auditor), scabench-org/hound, slvDev/weasel (talk-to static analyzer). Workflow tools also appear: bountyoperator/bounty-operator (pre-submission review for bounty reports), heavyw8t/The-Judge (scores findings), hackenproof-public/skills (bounty triage).
  • Paid, EVM: Zellic V12, Octane, SolidityScan, AuditBase, Firepan, Solarizer, Veritas Protocol, One Dollar Audit (flat $1 report).
  • Paid, Solana: HackHack (autonomous reviews with runnable exploit PoCs) and TNT House Risk-Data API (token risk scoring for trading agents, not a code auditor).
  • Paid, multi-language: CertiK AI Auditor (Solidity, Move, Solana Rust), Nethermind AuditAgent, Cantina Apex, Sherlock Audit Engine, Olympix, Wake Arena.

Caveats

The page gives no benchmarks, detection rates, versions, install commands or pricing (except the $1 audit). Entries are not compared, and the single featured pick is the maintainer's own repository. Coverage is thinnest outside EVM: Move has 5 free tools and no paid ones, ZK has 1, and the paid Solana list has 2. Several entries have only a vague description, such as "AI security platform", so the linked repo or site must be checked before relying on one.

Technologies named here

  • Solidity
  • Ethereum
  • Rust
  • Solana
  • Circom
  • Move

Related in AI Security