Solidity heuristic pattern scan · Solidity Scan

POSTBaseSolanaArbitrumPolygonMonadAvalancheeip155:1329OptimismFraxtaleip155:42220stellar:pubnetalgorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=

$0.01

per call · USD Coin on Base

Deterministic static pattern scan of Solidity smart-contract source text - a fixed ruleset flagging tx.origin authentication, delegatecall, selfdestruct, unchecked low-level calls, unchecked .send(), floating pragmas, block-timestamp dependence, weak block-derived randomness, value-call reentrancy surface, inline assembly, ecrecover, and missing SPDX headers. Returns line-anchored findings with severities.

Endpoint

POST https://agent402.tools/api/solidity-scan

Calls / 30d

Unique payers / 30d

Aug 31

Last called

exact

Payment scheme

Call this service

TypeScript · @x402/fetch

import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.PRIVATE_KEY);
const fetchWithPay = wrapFetchWithPayment(fetch, account);

const res = await fetchWithPay("https://agent402.tools/api/solidity-scan", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    "source": "pragma solidity ^0.8.0;\ncontract Wallet {\n  function drain(address payable to) external {\n    require(tx.origin == msg.sender);\n    to.call{value: address(this).balance}(\"\");\n  }\n}"
  }),
});
const data = await res.json();

cURL

curl -X POST \
  "https://agent402.tools/api/solidity-scan" \
  -H "Content-Type: application/json" \
  -d '{"source":"pragma solidity ^0.8.0;\ncontract Wallet {\n  function drain(address payable to) external {\n    require(tx.origin == msg.sender);\n    to.call{value: address(this).balance}(\"\");\n  }\n}"}' \
  -H "X-PAYMENT: <signed x402 payment>"

Example response

{
  "disclaimer": "Deterministic heuristic pattern check - not a compiler, not an audit.",
  "findings": [
    {
      "line": 4,
      "message": "tx.origin used - authentication via tx.origin is phishable; use msg.sender.",
      "rule": "tx-origin",
      "severity": "high",
      "snippet": "require(tx.origin == msg.sender);"
    }
  ],
  "lines": 7,
  "summary": {
    "high": 2,
    "info": 1,
    "low": 1,
    "medium": 1
  }
}

Payment details

Pay to0xabf4fabd7c416fb67202e5f9002389fc75e2a9d0

AssetUSD Coin · 0x833589fcd6edb6e08f4c7c32d4f71b54bda02913

NetworksBase, Solana, Arbitrum, Polygon, Monad, Avalanche, eip155:1329, Optimism, Fraxtal, eip155:42220, stellar:pubnet, algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=

Schemesexact, upto

Is this your API?

Pin it to the top of Onchain Data and the homepage with a featured placement.

Get featured →