cairo-vulnerability-scanner

To audit StarkNet contracts for common Cairo vulnerabilities, scan the codebase to detect six critical security patterns including arithmetic overflow and signature replay. The scanner generates structured reports with file references and severity ratings to guide remediation.

Automated static analysis can detect six critical Cairo vulnerability patterns: arithmetic overflow, L1-L2 messaging issues, address conversion pitfalls, and signature replay. It identifies these structural flaws by pattern matching during security audits.

Yes, the vulnerability scanner explicitly supports L1-L2 messaging and signature verification flows. It applies patterned detections to these specific StarkNet interactions to identify potential security flaws during audits.

To generate a structured vulnerability report for a StarkNet project, run the scanner to analyze Cairo code for critical patterns. It outputs reports containing file references, severity levels, and actionable mitigation guidance for remediation.

Yes, you can integrate this vulnerability scanner with Caracal and static-analysis workflows. It supports automated audits by applying patterned detections to Cairo contracts within existing development pipelines.

To fix address conversion pitfalls in Cairo contracts, review the structured vulnerability report for mitigation guidance and example patterns. The scanner provides specific remediation steps to correct flawed address handling logic.