// case study — 03/05

ChainAudit

Automated Solidity smart-contract security auditor

ChainAudit screenshot

overview

Static analysis engine that parses Solidity smart contracts, extracts the AST, and runs a suite of vulnerability detectors — reentrancy, integer overflow/underflow, unchecked external calls, improper access control, and gas-griefing vectors. Generates structured audit reports with per-finding severity ratings (Critical → Low) and remediation guidance. Built on the blockchain security knowledge from the IBM auditing engagement.

metrics

6+
vulnerability classes
Critical→Low
severity ratings
automated
audit reports

architecture

  1. 01Solidity parser — AST extraction
  2. 02Vulnerability detectors — reentrancy, overflow, access control
  3. 03Unchecked-call + gas-griefing scanners
  4. 04Severity classifier — Critical / High / Medium / Low
  5. 05Audit report — structured findings + remediation

stack

  • Solidity
  • JavaScript
  • AST Analysis
  • Static Analysis
  • Web3
  • Ethereum

links

next project

Accident Risk Model