substrate-vulnerability-scanner

To audit Substrate pallets for critical vulnerabilities, you can run this scanner against your project to identify seven specific vulnerability patterns including arithmetic overflow, panic DoS, and bad origin checks, generating a comprehensive report with remediation guidance.

Before deploying a parachain, you should check for seven critical Substrate/FRAME vulnerabilities: arithmetic overflow, panics, weight-related DoS, verify-first/write-last issues, unsigned validation, bad randomness, and bad origin checks to prevent security regressions.

Yes, this scanner applies to auditing custom pallets, runtime configurations, runtime upgrades, and Polkadot-like deployments by performing platform-aware analysis to locate pallets and test patterns for actionable remediation guidance.

Platform-aware analysis locates pallets, runtime configurations, and migration/test patterns within your Substrate project to detect vulnerability patterns accurately and produce actionable remediation guidance for your specific deployment context.

The best way to prevent security regressions in Substrate runtimes is to run a comprehensive vulnerability scan that detects critical issues like arithmetic overflow, weight-related DoS, and bad randomness before deployment, ensuring all origin checks and unsigned validations are secure.

Yes, the scanner detects verify-first/write-last issues in Substrate pallets along with six other critical vulnerability patterns, providing specific remediation guidance to ensure your runtime executes state changes securely after verification.