entry-point-analyzer

To find state-changing entry points in a Solidity smart contract, analyze the codebase to detect externally callable functions that modify state. This process categorizes functions by access level, such as public or role-restricted, while excluding view and pure read-only functions.

Yes, entry point analysis works with CosmWasm and Vyper codebases, alongside Solana/Rust, Move, and TON. It detects external functions that modify state across these environments, categorizing them by access control patterns to map the attack surface.

Mapping a smart contract attack surface involves identifying all externally callable functions that transfer tokens, change parameters, or pause contracts. This creates a structured audit report classifying functions by access level, forming the foundation of your audit plan.

Identifying privileged operations in smart contracts involves categorizing state-changing functions by access level, including public, admin, role-restricted, and contract-only. This analysis detects specific restriction patterns to highlight externally callable privileged functions.

View and pure functions are excluded from smart contract entry point analysis because they are read-only operations that do not modify contract state. Security auditing focuses on state-changing entry points to accurately map the attack surface.