cosmos-vulnerability-scanner

Non-determinism in Cosmos SDK blockchains often stems from floating-point math or unordered map iteration in BeginBlocker or EndBlocker functions. This scanner detects these consensus-critical patterns in Go and Rust codebases to prevent chain halts.

To audit CosmWasm contracts for consensus-breaking vulnerabilities, you can scan the Rust codebase using this tool. It automatically identifies 9 critical patterns including non-determinism, incorrect signers, and rounding errors to prevent chain halts and fund loss.

Yes, this vulnerability scanner explicitly supports auditing custom Cosmos SDK x/ modules. It analyzes Go codebases to flag ABCI panics, incorrect signers, and non-determinism issues specific to your custom module implementations.

Common ABCI panic risks in Cosmos SDK modules include unhandled nil pointers or out-of-bounds errors during block processing. This scanner identifies ABCI panics in Go and Rust codebases to prevent consensus failures and chain halts.

Yes, you can use this scanner to find rounding errors in your Cosmos SDK or CosmWasm codebase. It analyzes Go and Rust source code to detect rounding errors and other non-deterministic behaviors that can break blockchain consensus.