Griefing Vector Scanner

WHAT IT DOES

This tool connects to your EVM wallet and scans smart contract source code for griefing vectors—patterns that allow malicious actors to disrupt contract functionality or harm other users. It identifies denial-of-service (DoS) vulnerabilities, front-running opportunities, transaction-ordering dependence (TOD), gas griefing attacks, and malicious input patterns. The tool analyzes external calls, state changes, loops, and input validation to flag potential griefing vectors that could be exploited to degrade contract performance or user experience.

HOW TO USE

Connect your Web3 wallet using the Connect button. Paste your contract source code in the Contract Source Code field. Click "Scan for Griefing" to analyze the code for griefing vectors. Click "Load Sample" to populate fields with an example contract containing various vulnerabilities. Results appear in the Results card with a summary of vectors found and risk level (High, Medium, Low, or None), followed by a detailed breakdown of each detected vector with its type, severity, and pattern description.

TECHNICAL MECHANISM: GRIEFING VECTOR PATTERN DETECTION

The tool uses regular expression pattern matching to analyze contract source code for known griefing patterns. It detects denial-of-service vectors by identifying require statements that could be triggered by attackers. Front-running patterns are detected through block timestamp and block number usage. Transaction-ordering dependence is identified in balance updates combined with transfers. Gas griefing is flagged when external calls with value are made without proper gas limits. Malicious input patterns are detected in bytes/calldata handling. Reentrancy-related griefing is identified in external calls with state changes. Unchecked external calls and loops with external calls are also flagged. Each vector is categorized by severity based on potential impact.

WHAT IT CANNOT SEE

This tool cannot dynamically test for griefing vulnerabilities—it performs static analysis only. It cannot detect griefing that depends on external state or complex interactions—the tool analyzes only the provided source code. It cannot guarantee that flagged patterns are actual vulnerabilities—some patterns may be safe in specific contexts. It relies on source code parsing and may produce false positives or miss complex patterns. It cannot analyze contracts with obfuscated or highly optimized code—the tool works best with readable source code. It cannot detect griefing vectors that require specific execution contexts or external dependencies.

PLEASE NOTE

This is a read-only tool—it never signs transactions. All data is processed in-memory and never persists. The tool supports EVM chains only—Ethereum, Polygon, BSC, Arbitrum, Optimism, Avalanche, Base, and Fantom. Griefing vectors can be subtle and context-dependent—use this tool as a starting point for security review, not as a final audit. Always conduct thorough testing and consult security professionals.