Smart Contract Auditor

WHAT IT DOES

Smart Contract Auditor is a read-only security tool that inspects live EVM contracts for structural risks and on-chain evidence. It retrieves bytecode, storage slots, transaction history, event logs, balances, and proxy admin addresses directly from the chain. It detects proxy patterns, flags unusual opcodes (including SELFDESTRUCT and delegatecall patterns), samples storage to expose admin or implementation slots, and estimates source verification status. The tool produces a clear, structured report of findings without requiring any signatures or transactions.

HOW TO USE

Paste any contract address into the input field, select the network, and click Audit. The tool connects through your wallet's provider and returns a comprehensive report within seconds. No funds are at risk — this is a purely read-only operation. The report includes bytecode size, proxy detection, admin address (if discoverable), recent transaction count, storage slot samples, and a list of observations with severity indicators. All warnings and limitations are displayed alongside the results.

ADAPTIVE LOG-CHUNKING WITH BACKOFF

Public RPC providers enforce wildly different eth_getLogs block range limits — some allow 10,000 blocks, others cap at 1,000, and many reject requests that exceed their internal buffer. Instead of guessing a safe range and failing on the first rejection, this auditor walks backwards from the latest block in exponentially decaying chunks. When a request is rejected, the chunk size is halved and retried immediately. This guarantees that the scan completes on any provider without overwhelming the endpoint, and without giving up after a single refusal. The same backoff strategy is applied to storage reads and any other RPC call that may hit rate or size limits.

WHAT IT CANNOT SEE

This tool cannot detect off-chain dependencies, private key compromises, social engineering risks, or simulate full multi-contract attack paths with custom user-defined state transitions beyond what on-chain storage permits. It does not verify source code correctness, test execution paths, or audit business logic. It does not detect governance vulnerabilities, oracle manipulation, or cross-chain risks. It is a static inspection layer, not a formal verification suite or a penetration test.

PLEASE NOTE

EVM ONLY. Supports all Ethereum-compatible networks (Ethereum, Goerli, Sepolia, Optimism, Arbitrum, Polygon, and others). No Solana, Tron, Starknet, SUI, TON, Aptos, Bitcoin, Cosmos, or XRP. Always cross-check findings with block explorers and multiple independent sources before making security decisions.