Solidity Code Checker

WHAT IT DOES

Solidity Code Checker is a developer tool that performs basic pattern-based checks on Solidity smart contract code. Paste your Solidity code, select a check level (Basic, Standard, or Strict), and the tool scans for common issues including selfdestruct usage, delegatecall, call.value, tx.origin, block.timestamp manipulation, and other security-sensitive patterns. It detects missing SPDX license identifiers, missing pragma statements, and suggests best practices like using external over public functions. Results are displayed with severity badges (Critical, High, Medium, Low) and line numbers. This is essential for developers performing initial code reviews, catching common mistakes, learning Solidity best practices, or preparing code for a professional audit.

HOW TO USE

Connect your wallet using the BGWallet bridge (MetaMask or any Web3 wallet). Paste your Solidity code in the text area — include the license identifier, pragma statement, and the contract code. Select the check level: Basic (checks critical and high severity issues), Standard (critical, high, and medium severity), or Strict (all issues including low severity). Click "Check code" to analyze your code. The tool scans the code for patterns from a predefined list of security and style rules. Results display the overall status, number of issues found, lines checked, and a detailed table of issues with severity badges and line numbers. The tool provides actionable recommendations to improve your code.

TECHNICAL MECHANISM

The tool uses pattern-based analysis with regular expressions to scan Solidity code for known security and style issues. It maintains a list of patterns organized by severity — critical (selfdestruct, delegatecall, call.value), high (tx.origin, block.timestamp, block.number), medium (require, assert, address.send), and low (public functions, public state variables, pragma statements). Each pattern is associated with a descriptive message explaining the issue. The tool also performs additional checks for missing SPDX license identifiers, missing pragma statements, and function visibility suggestions. The check level determines which severity categories are included in the scan. The tool does not compile the code, perform static analysis, or check EVM compatibility — it relies entirely on pattern matching. All operations are performed client-side — no data is stored or transmitted.

WHAT IT CANNOT SEE

The tool cannot actually compile Solidity code without solc — it does not verify syntax or type correctness. It cannot detect all security vulnerabilities or logic errors — pattern-based analysis misses many complex issues like reentrancy, access control flaws, or arithmetic errors. It cannot validate contract code against deployed bytecode without additional data — it only checks the source. It cannot perform advanced static analysis or symbolic execution — the tool is limited to simple pattern matching. It cannot check code for EVM version compatibility without configuration — it does not verify compiler versions or EVM features. It cannot detect semantic errors or business logic flaws. The tool is read-only and does not sign any transactions.

PLEASE NOTE

This tool works exclusively with EVM-compatible chains for the wallet connection, but the code checker itself is chain-agnostic and works with any Solidity code. Solana, Tron, Starknet, SUI, TON, Aptos, Bitcoin, Cosmos, and XRP are not supported for wallet connection but the checker works regardless. This is a basic pattern-based check — it is not a substitute for a professional security audit, formal verification, or compilation. The tool does not store any data — all operations are performed client-side. The tool is provided as-is with no warranty or liability. Always verify code with a compiler and consider multiple analysis tools before deployment.