substrate-vulnerability-scanner

To audit Substrate FRAME pallets for security vulnerabilities, scan dispatchable extrinsics for arithmetic safety, origin mistakes, panic-prone logic, and weight issues. The scanner identifies seven critical risk patterns and outputs findings with file references and remediation guidance.

Before launching a custom Substrate chain, check for denial of service risks from missing weight bounds, broken access control from unsigned validation weaknesses, and crashes from arithmetic overflow. A pallet security scan identifies these platform-specific runtime flaws.

Yes, you can detect weight and fee problems in Polkadot runtime code by scanning pallets for missing bounds that enable spam and resource exhaustion. The scan flags weight logic issues that could lead to network denial of service attacks.

Yes, the Substrate vulnerability scanner checks unsigned transaction validation by reviewing dispatchables for validation ordering issues and unsigned weaknesses. It detects state-write problems where verify-first write-last behavior is expected.

The best way to find panic and DoS vulnerabilities in FRAME pallets is running a pattern-based analysis that scans for panic-prone logic and missing weight bounds. This approach identifies resource exhaustion risks across Substrate and Polkadot chains.

The security scanner covers seven specific risk patterns in Substrate pallets including arithmetic, panic, origin, weights, randomness, and validation ordering. It does not perform general logic review or detect business logic flaws outside these pattern categories.