🚀 VaultAI – Smart Contract Risk Analyzer
💡 Inspiration
Web3 users interact with smart contracts every day without truly understanding the risks behind them. Security tools exist, but they’re complex and built for auditors—not regular users. We built VaultAI to bridge this gap by making smart contract security instant, automated, and easy to understand.
⚙️ What it does
VaultAI lets users connect their wallet and input any smart contract address to instantly receive:
🔢 Risk Score (0–100)
⚠️ Detected vulnerabilities 🤖 AI-generated explanations in simple language
It turns raw security data into actionable insights in seconds.
🧠 How we built it
VaultAI is a full-stack system: Frontend: Next.js + TypeScript + ethers.js.
Backend: Node.js + Express.
Data Source: Etherscan API (contract fetching).
Security Engine: Slither static analysis.
AI Layer: Converts vulnerabilities into human-readable insights.
Pipeline: Fetch smart contract source from Etherscan Resolve proxy contracts when needed Run Slither for vulnerability detection Compute severity-based risk score Use AI to explain findings clearly Display results in an interactive dashboard
We model risk as:
$$Risk Score=min(∑wi, 100)$$
Where severity weights reflect impact levels (High, Medium, Low).
⚔️ Challenges we ran into Handling unverified contracts with no source code Detecting and resolving proxy contracts Integrating Slither with correct Solidity environments Parsing multi-file contract structures from Etherscan Translating raw vulnerabilities into user-friendly insights 🧠 What we learned Real-world smart contract security workflows Blockchain data extraction and analysis pipelines Static analysis with Slither Designing systems that combine security + AI for UX Handling edge cases in production-like Web3 environments 🚀 What’s next Bytecode-level analysis for unverified contracts Multi-chain support (Polygon, BSC, etc.) Advanced ML-based risk scoring Real-time contract monitoring and alerts 🏁 Final Impact VaultAI makes smart contract security accessible to everyone by transforming complex vulnerabilities into simple, actionable insights—helping users understand risk before they interact with blockchain contracts.
Log in or sign up for Devpost to join the conversation.