substrate-vulnerability-scanner

To audit Substrate pallets for security vulnerabilities, scan pallets/*/lib.rs and runtime/config to identify arithmetic overflows, panics, weight misconfigurations, and weak randomness. The scanner reports risky code paths with file references and recommended mitigations.

Critical FRAME pallet vulnerabilities include arithmetic overflows, panic-induced DoS, improper weights, unsigned transaction validation gaps, weak randomness usage, bad origin handling, and transactional storage compatibility issues. Scanning detects these seven patterns across your codebase.

Yes, you can audit governance modules in Polkadot-like ecosystems. The scanner is applicable to Substrate runtimes, custom FRAME pallets, and governance modules, enforcing targeted checks for critical vulnerability patterns and reporting file references.

Detect arithmetic overflow and panic-induced DoS in Substrate runtime code by scanning for these specific vulnerability patterns. The tool enforces checks across pallets and runtimes, providing actionable mitigations and best-practice guidance.

The best way to check pallet weights and unsigned transaction validation is a targeted scan of pallets/*/lib.rs. The scanner enforces checks for weight misconfigurations and unsigned transaction validation gaps, reporting issues with recommended mitigations.

Yes, the security audit tool checks for bad origin handling and transactional storage compatibility. It enforces checks for these vulnerabilities alongside arithmetic overflows, panics, weak randomness, and unsigned transaction gaps across Substrate codebases.