Smart Contract Audit avatar

Smart Contract Audit

Pricing

from $0.10 / actor start

Go to Apify Store
Smart Contract Audit

Smart Contract Audit

Analyze Ethereum smart contracts for security vulnerabilities. Input a verified contract address, get a JSON risk report with findings, risk score, and recommendations. Supports 7 EVM chains. Detects reentrancy, delegatecall exploits, unchecked calls, and 12 more vulnerability patterns.

Pricing

from $0.10 / actor start

Rating

0.0

(0)

Developer

S

S

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

2 days ago

Last modified

Share

Smart Contract Security Audit API

Automated security analysis for Ethereum smart contracts. Input a verified contract address, get a structured JSON risk report with vulnerability findings, risk score, and remediation recommendations.

What it does

This Actor fetches verified Solidity source code from Etherscan and runs static vulnerability analysis covering 15+ common vulnerability patterns including:

  • Critical: Reentrancy, delegatecall to untrusted targets, selfdestruct
  • High: tx.origin auth, unchecked call returns, unprotected withdrawals
  • Medium: Integer overflow (unchecked blocks), timestamp dependence, front-running
  • Low: Floating pragma, missing events, magic numbers
  • Info: Centralization risk, assembly usage, unresolved TODOs

Key features

  • Multi-chain support: Ethereum, Polygon, Arbitrum, Optimism, Base, BSC, Avalanche
  • Proxy-aware: Automatically detects proxy contracts and audits the implementation
  • Risk scoring: 0–10 risk score with severity-weighted computation
  • Zero setup: No servers, no API keys needed (Etherscan key optional for higher rate limits)

Input

FieldTypeRequiredDescription
contractAddressstringYesVerified contract address (0x...)
chainIdintegerNoChain ID (default: 1 for Ethereum)
etherscanApiKeystringNoEtherscan API key for higher rate limits
severityThresholdstringNoMinimum severity to report (default: "info")

Output

{
"status": "completed",
"contract_address": "0xdAC17F958D2ee523a2206206994597C13D831ec7",
"chain": "Ethereum",
"contract_name": "TetherToken",
"risk_score": 5.2,
"risk_level": "medium",
"vulnerability_count": 7,
"severity_summary": { "high": 1, "medium": 3, "low": 2, "info": 1 },
"contract_metadata": {
"solidity_version": "^0.4.18",
"total_lines": 435,
"uses_openzeppelin": false
},
"findings": [
{
"id": "REENTRANCY",
"name": "Reentrancy Vulnerability",
"severity": "critical",
"description": "...",
"recommendation": "...",
"mitigated": false,
"instances": [{ "line": 142, "code": "..." }],
"instance_count": 2
}
]
}

Use cases

  • DeFi developers: Quick security check before deploying or interacting with contracts
  • Security researchers: Triage tool to identify contracts worth deeper manual review
  • Portfolio managers: Automated risk assessment of DeFi protocols
  • Monitoring pipelines: Integrate via Apify API to scan new contracts as they're verified

Pricing

This Actor uses minimal compute — a typical audit takes 2–5 seconds and costs fractions of a cent in Apify platform credits. No external API costs beyond the free Etherscan tier.

Limitations

This is a static analysis tool and does not replace a professional audit. It detects common vulnerability patterns but cannot reason about complex business logic, cross-contract interactions, or economic exploits. Use it as a first-pass triage, not a final verdict.