recon

Automated tool sweep — entry-point analysis, static analysis dispatch, invariant identification triggers, and tool recommendations.

Identify protocol invariants from code and adversarially find paths to break them. General-purpose — works on any codebase.

MCP server for searching Solodit's audit finding database with granular filters.

Protocol-type specialist reviewers (staking, DeFi, access control) and domain-adjacent vulnerability detection skills (oracle/flashloan, state invariants, signature replay, semantic guards).

Full audit pipeline orchestrators — coordinates scope, scout, recon, and chain-specific review into end-to-end workflows. EVM and Aztec pipelines.

Slither and Aderyn static analysis agents with intelligent false-positive filtering and cross-tool deduplication.

Modular Claude Code plugin marketplace for smart contract security auditing

Pre-code intelligence — define audit scope, gather docs/specs from Notion, run spec-to-code compliance, generate hypotheses for invariants, bug areas, and recommended tools.

EVM/Solidity deep security review — adversarial bug validation, 5 fundamental vulnerability detection skills, gas optimization, and variant analysis.

Adversarial peer review of audit reports via inline annotations. Debates disagreements, re-evaluates severity, builds calibration log.