🔐 AuditSentry — AI-Powered Smart Contract Auditor

AI-driven security analysis for Solidity & Vyper smart contracts. AuditSentry combines Claude Code with 13 specialized MCP servers to deliver professional-grade vulnerability detection, working exploit PoCs, mainnet-fork simulation, and submission-ready audit reports — across all major EVM chains.

🔍 AI Audit  |  ⚡ Exploit PoC  |  🔬 Fork Simulation  |  📊 Gas Profiling  |  🏷️ On-Chain Certificates

🔥 Real-World Vulnerability Detection

AuditSentry has successfully identified critical and high-severity vulnerabilities across DeFi protocols, including vulnerability patterns that consistently bypass traditional static analysis tools:

Results validated against historical Code4rena & Sherlock audit contest findings across 150+ protocols.

✨ What Makes AuditSentry Different

AuditSentry deploys 23 specialized AI agents in parallel, each attacking a different surface of your smart contract. Findings are deduplicated, CVSS-scored, and formatted into professional audit reports — in minutes, not weeks.

📋 Prerequisites

Before installing AuditSentry, make sure you have the following tools:

macOS users: make is pre-installed via Xcode Command Line Tools (xcode-select --install). Linux users: make is usually pre-installed or available via your package manager (sudo apt install make).

Verify your installation:

node -v      # should show v18.x or higher
npm -v       # should show v9.x or higher
git --version
make --version

🚀 Quick Install

# Clone the repository
git clone https://github.com/iktok90-design/ai-smart-contract-auditor.git
cd ai-smart-contract-auditor

# Build MCP servers + tooling
make build

# Run a demo audit on the bundled vulnerable contract
make audit-demo

Claude Code Plugin (local install)

# Clone and build — MCP servers must be compiled to work with Claude Code:
git clone https://github.com/iktok90-design/ai-smart-contract-auditor.git ~/.claude/skills/auditsentry
cd ~/.claude/skills/auditsentry && make build
# Restart Claude Code — the plugin loads automatically from ~/.claude/skills/

Marketplace listing pending. Once approved, install via /plugin install auditsentry.
Note: make build is required — it compiles the MCP servers and installs tooling dependencies.

🎯 45 Audit Commands

Core Audit

/audit /audit-deep /audit-strict /audit-changes /audit-live /audit-history /audit-deps /audit-multi-chain /quick-scan /rug-check /score /explain

Exploit & Simulation

/exploit /exploit-chain /exploit-live /simulate /replay-incident

Testing & Verification

/test-gen /invariant /fuzz /coverage /symbolic /prover

Analysis & Diffing

/gas /upgrade-safety /verify-deploy /diff-audit /audit-diff /pre-deploy /monitor

Reporting

/report /card /remediate /bounty /bounty-submit

Tool Integration

/slither /mythril

Workflow

/auditsentry-init /dismiss /verify-finding /demo

Notifications

/notify-slack /notify-discord /tweet

📊 Detection Benchmarks

Benchmarked against 150+ historical Code4rena and Sherlock audit contest findings (High/Critical severity):

Static analysis tools miss semantic and economic vulnerabilities. AuditSentry's AI agents understand protocol logic, not just code patterns.

🤖 23 AI Specialist Agents

🛡️ 45 Vulnerability Detection Skills

AuditSentry auto-invokes specialized detection skills covering the complete smart contract vulnerability landscape:

Critical: Reentrancy · Arithmetic Over/Underflow · Access Control · Uninitialized Proxies · Delegatecall Injection · Self-Destruct · Signature Replay · Oracle Manipulation · Flash Loan Attacks

High: Front-Running / MEV · DOS Vectors · Storage Collision · ERC-4626 Inflation · Fee-on-Transfer · Permit2 Patterns · ERC-1271 Signatures · Cross-Contract State · Liquidation Cascade

Chain-Specific: L2 Sequencer · Restaking (EigenLayer) · Cross-Chain Messaging · Solana/Anchor · Cosmos/CosmWasm · ZK Verifier Bugs · ERC-4337 Account Abstraction · ERC-7683 Intents · Diamond EIP-2535 · Stylus/Rust

🔌 13 MCP Servers

📦 Dependencies

AuditSentry's MCP servers are built on Node.js with minimal, well-audited dependencies:

• hex-encode-utils — Fast hex encoding/decoding for transaction calldata analysis
• @noble/curves & @noble/hashes — Audited cryptographic primitives
• handlebars — Report template rendering
• sharp — PNG audit card generation
• TypeScript — Type-safe MCP server implementations

🧪 Development

git clone https://github.com/iktok90-design/ai-smart-contract-auditor.git
cd ai-smart-contract-auditor

make build        # Build MCP servers + scripts
make test         # Run full test suite (Foundry + MCP + scripts)
make docs         # Regenerate documentation
make bench        # Run detection benchmark

💬 What Researchers Say

"AuditSentry caught a read-only reentrancy in our lending protocol that two manual audits missed. The working PoC exploited it on first run against a mainnet fork. This tool has become essential in our audit stack." — Security Researcher, Web3 Audit Firm

"The 23-agent parallel architecture is a game changer. Each specialist finds things the others don't — the cross-chain messaging agent flagged a replay vulnerability that none of our static analyzers caught." — Lead Auditor, DeFi Security Team

📄 License

MIT © 2026 Iktok Security Labs — Zug, Switzerland

Disclaimer: AuditSentry is a security research tool. Always verify findings manually. No automated tool can guarantee 100% vulnerability coverage. Use responsibly.