substrate-vulnerability-scanner

To audit Substrate pallets for security vulnerabilities, scan the Rust code in pallets/*/lib.rs and runtime/lib.rs to detect seven critical vulnerability patterns including arithmetic overflow, bad origin checks, and unsigned validation errors. The scanner generates a prioritized list of issues with file references and remediation guidance.

When checking FRAME runtime logic, you should scan for seven critical vulnerability patterns: arithmetic overflow, dont panic, incorrect weights, verify-first violations, unsigned validation flaws, randomness misuse, and bad origin checks across dispatchables and storage writes.

Running a security audit on a Substrate-based blockchain involves scanning repository-wide pallet and runtime code to surface risky constructs. The scanner analyzes Rust files to enumerate vulnerabilities and generates a remediation report with actionable fixes to reduce the risk of runtime exploits.

This vulnerability scanner is specifically designed for Substrate-based chains and FRAME modules. It analyzes Rust code in pallets/*/lib.rs and runtime/lib.rs files to identify critical Substrate vulnerability patterns, making it unsuitable for generic Rust blockchain projects outside the Substrate ecosystem.

To detect bad origin checks and unsigned validation issues in pallets, the scanner analyzes dispatchables and unsigned validation logic in your Rust code. It identifies patterns where origin checks are missing or incorrect and flags unsigned validation flaws with specific file references and suggested fixes.