entry-point-analyzer

State-changing entry points are externally callable functions that modify contract data and represent the potential attack surface. They are categorized by access level—public, admin, role-restricted, or contract-only—to prioritize scrutiny for access control vulnerabilities during security audits.

Yes, the entry point analyzer works with Vyper and Solana/Rust smart contracts, alongside Solidity, Move, TON, and CosmWasm. It detects externally callable functions modifying state across these languages to generate structured audit reports.

Map the attack surface of a DeFi protocol by scanning the codebase to identify externally callable functions that modify state. This excludes view and pure functions, categorizing remaining state-changing operations by access level to highlight privileged operations requiring scrutiny.

Read-only view and pure functions are excluded from smart contract entry point analysis. The focus is strictly on detecting state-changing functions that modify contract data, ensuring audit reports only highlight operations capable of altering the contract's state.

The best way to identify privileged operations in Solidity is to analyze the codebase for state-changing functions and categorize them by access level. This classifies functions as public, admin, role-restricted, or contract-only, isolating privileged operations for targeted access control review.