cosmos-vulnerability-scanner

Scan Cosmos SDK blockchains and CosmWasm contracts for consensus-critical vulnerabilities.

1|Updated Feb 17, 2026
One-click install
npx skills add https://github.com/Ramprasad4121/srp --skill cosmos-vulnerability-scanner-ramprasad4121
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cosmos-vulnerability-scanner
Source: https://github.com/Ramprasad4121/srp/tree/main/skills-repos/trailofbits/plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner
Command: npx skills add https://github.com/Ramprasad4121/srp --skill cosmos-vulnerability-scanner-ramprasad4121

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill systematically scans Cosmos SDK blockchains and CosmWasm smart contracts for critical, consensus-breaking vulnerabilities, preventing chain halts and fund loss.

Core Features & Use Cases

  • Vulnerability Detection: Identifies 9 specific consensus-critical patterns unique to Cosmos.
  • Code Analysis: Analyzes Go modules and Rust CosmWasm contracts for security flaws.
  • Use Case: When auditing a new Cosmos SDK-based blockchain project, use this Skill to proactively identify and fix potential consensus failures before mainnet launch.

Quick Start

Use the cosmos-vulnerability-scanner skill to audit the current project for consensus-critical vulnerabilities.

Frequently Asked Questions about cosmos-vulnerability-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Cosmos SDK blockchains for consensus-critical vulnerabilities?

To scan Cosmos SDK blockchains for consensus-critical vulnerabilities, you can use static analysis to identify non-determinism, incorrect signers, and ABCI panics in Go codebases. The scanner analyzes Go modules to find and report security flaws with recommended fixes.

What vulnerabilities cause chain halts in CosmWasm smart contracts?

Chain halts in CosmWasm smart contracts are frequently caused by consensus-breaking vulnerabilities like non-determinism, incorrect signers, and rounding errors. Analyzing Rust codebases using static pattern matching identifies these 9 critical security flaws before mainnet launch.

Can I audit Rust CosmWasm contracts and Go modules for ABCI panics?

Yes, you can audit Rust CosmWasm contracts and Go modules for ABCI panics. The scanner analyzes both codebases using static analysis to detect consensus-critical vulnerabilities and reports the identified security flaws with actionable fixes.

When do I need to run a vulnerability scan on a Cosmos blockchain project?

You need to run a vulnerability scan on a Cosmos blockchain project before mainnet launch to proactively identify consensus failures. Scanning Go and Rust codebases detects 9 specific consensus-critical patterns, preventing potential chain halts and fund loss.

What is the best way to find non-determinism and rounding errors in Cosmos SDK code?

The best way to find non-determinism and rounding errors in Cosmos SDK code is through static analysis and pattern matching. This approach systematically scans Go modules to pinpoint consensus-critical vulnerabilities and provides recommended fixes.

Does static analysis detect all consensus-breaking bugs in Cosmos blockchains?

Static analysis detects 9 specific consensus-breaking bugs in Cosmos blockchains, including non-determinism, incorrect signers, and ABCI panics. It analyzes Go and Rust codebases to identify these critical security flaws and suggest appropriate fixes.