What problem does it solve? Auditing StarkNet contracts requires deep knowledge of Cairo-specific risks like felt252 arithmetic overflow, L1-L2 messaging flaws, and signature replay, which generic Solidity audit checklists miss entirely. ## Core Features & Use Cases - Six Vulnerability Patterns: Detects felt252 arithmetic overflow, unchecked L1 handler from_address, L1-L2 address conversion issues, message failure without cancellation, overconstrained cross-layer validation, and signature replay. - Structured Audit Workflow: Guides a six-step scan covering platform identification, arithmetic safety, L1 handler analysis, signature review, bridge auditing, and Caracal static analysis. - Severity-Ranked Reporting: Produces findings with file locations, vulnerable code, attack scenarios, and remediation code, prioritized as Critical, High, or Medium. - Use Case: Before deploying a StarkNet token bridge, run this scan to verify every #[l1_handler] validates from_address and that L1 deposits implement message cancellation, preventing infinite mint or locked funds. ## Quick Start Scan the Cairo contracts in my src/ directory for StarkNet vulnerabilities and report any critical findings with fixes.
