substrate-vulnerability-scanner

You can scan Substrate pallets for security vulnerabilities by analyzing Rust code in dispatchable functions, weight calculations, and unsigned transaction validation logic to identify critical risks.

Critical vulnerabilities in FRAME runtimes include arithmetic overflow, panic DoS, incorrect weights, and bad origin checks, which can cause node crashes, DoS attacks, and unauthorized access.

To audit a custom Substrate pallet before deployment, analyze the Rust code for platform-specific indicators and project structure to pinpoint common and critical security flaws.

Yes, this vulnerability scanner detects bad origin checks in Polkadot pallets, alongside six other critical vulnerabilities including arithmetic overflow, panic DoS, and incorrect weights.

You need to analyze weight calculations in Substrate runtime code because incorrect weights represent a critical vulnerability that can lead to denial-of-service attacks and node instability.