๐ Inspiration
I recently started learning about blockchain and got introduced to Solidity. In the beginning, I was confused by YouTube tutorialsโespecially when writing complex payable contracts, as their approaches kept changing. Later, when Bybit got hacked, I realized that these variations were intentional to prevent vulnerabilities.
This made me wonder: Why not automate the process of securing smart contracts? Thatโs when I decided to build Smart Contract Auditorโa tool that detects vulnerabilities before they lead to million-dollar losses.
๐ What It Does
- Uses Slither to analyze Solidity contracts and detect vulnerabilities.
- AI-powered chat (LangChain) helps users understand and fix security issues.
- Provides detailed reports to ensure contracts are safe before deployment.
๐ How We Built It
- Django โ Backend framework for managing the web app.
- Tailwind CSS & DaisyUI โ For a modern and user-friendly UI.
- Django Auth & SQLite โ Secure user authentication and data storage.
- Slither โ Static analysis tool to detect vulnerabilities in Solidity contracts.
- LangChain โ AI chatbot to explain security issues and suggest fixes.
โ ๏ธ Challenges We Ran Into
- Integrating Slither with Django โ Running Slither inside a Django backend and parsing its output efficiently.
- Making AI Explanations Useful โ Fine-tuning LangChain responses to provide actionable security recommendations instead of generic answers.
- Ensuring Accuracy โ Validating that the detected vulnerabilities were real and not false positives.
- UI/UX Simplicity โ Presenting complex security findings in an easy-to-understand format for developers.
๐ Accomplishments That We're Proud Of
- Successfully integrated Slither into a web app for automated contract analysis.
- First time using LangChain to enhance security analysis with AI-powered insights.
- Built a user-friendly interface using Tailwind and DaisyUI.
- Created a tool that can potentially save developers from million-dollar hacks!
๐ What We Learned
- Smart contract security โ Deepened our understanding of vulnerabilities like reentrancy attacks, integer overflows, and unchecked external calls.
- Working with AI & blockchain security โ Combining LangChain and Slither to make security more accessible.
- Optimizing performance โ Running Slither efficiently in a web environment.
๐ฎ What's Next for Smart Contract AI Auditor
- Expand support beyond Solidity โ Add Rust support for Solana smart contracts.
- AI-powered auto-fix โ Automatically rewrite smart contracts to patch vulnerabilities.
- Real-time security updates โ Stay ahead of new exploits and provide continuous security monitoring.
- More blockchain integrations โ Support Ethereum, Binance Smart Chain, Solana, and beyond!
Log in or sign up for Devpost to join the conversation.