Works with every EVM chain
99% of $100M+ hacks happen between contracts — not inside them.
Every tool scans one file at a time. Real protocols are 5–50 contracts talking to each other. That's where attackers hide.
WHAT NOBODY ELSE DOES
Built for how DeFi actually gets hacked.
Multi-Contract Protocol Analysis
Upload multiple .sol files (Pro for full multi-file) or fetch Solidity from a public GitHub repo. We map contracts and call edges so cross-contract issues surface in context—not as isolated file passes.
Dependency Graph Visualization
See how contracts connect in your scan report. Useful for spotting trust boundaries and where external calls concentrate—then validate in code.
Exploit Storytelling
When a finding lines up with a known incident pattern, we enrich it with real-world hack context from our database. Not every row maps to a headline case—when it does, it is there to explain why the class matters.
Dual Reports: Developer + Founder
One toggle: engineer view with paths, severity, and fixes; stakeholder view with plainer language. Same findings—two ways to read them.
Confidence and evidence tiers
Each finding carries a confidence score plus a tier (e.g. proven vs review). A verifier pass and snippet checks strip weak hits—aiming for fewer, clearer signals instead of a wall of noise.
Industry context
We draw on a curated exploit and pattern dataset so results sit in the same vocabulary teams use in post-mortems—context for triage, not a guarantee your protocol matches a past incident.
Scan progress
Deep and Protocol runs show multi-stage progress while the engine works—static passes first, then capped AI steps where your plan allows. You see activity, not a black box.
THE PROCESS
Protocol-level security in three steps.
Sign up and add code
Create a free account, then upload .sol files, paste a contract, or pull Solidity from a public GitHub URL. ZIP uploads are not supported yet—use individual files. Free tier is single-file; Pro unlocks multi-file.
Pick Quick or Deep
Quick Scan runs deterministic checks (patterns, AST, taint)—fast, no LLM. Deep Scan adds multi-agent AI plus a verification pass on top. Protocol Audit adds PoC-oriented steps for paid plans.
Review honest findings
Open the report: severity, confidence, evidence tier, and optional hack context. Toggle Developer vs Founder view. Export PDF when you need a shareable artifact.
Order of magnitude: reported DeFi losses in recent years (sources and years vary)
Curated vulnerability patterns and incident references in-engine (grows with the dataset)
Three scan paths
Quick: deterministic only. Deep: AI plus verification. Protocol: deepest analysis and PoC-oriented steps on paid plans.
Reality check
No scanner eliminates risk. We bias toward verified, evidence-backed findings so your team spends time on what matters.
Simple, transparent pricing.
Free
Try the full engine — 1 Protocol Audit + 1 Deep Scan. No card needed.
Pro
Solo auditors shipping to mainnet. Full AI + exploit proofs.
Team
For audit firms and protocol teams. Maximum coverage.
WHAT BUILDERS SAY
Built for how teams review risk.
Early feedback from builders using AuditSwarm in their security workflow.
We use AuditSwarm as a first pass before external audit—especially for cross-contract and oracle-adjacent code. It is fast enough to run on every PR once CI is wired up.
Rahul M.
Lead Smart Contract Developer, DeFi Protocol
The founder-facing view helps us explain severity without dumping a spreadsheet of alerts on the team. We still verify anything critical manually—but the narrative cuts prep time.
Sarah K.
Co-Founder, Lending Protocol
Seeing contracts as a graph in the report matches how we already think about composability. It is not a replacement for a formal audit, but it is a better starting point than lint-only CI.
James L.
Senior Solidity Engineer
Stop auditing one contract.
Start securing your protocol.
Free tier: starter credits, no card required. Quick Scan is usually seconds to a minute on small contracts; Deep Scan can take a few minutes depending on size. We do not promise human-audit completeness—we promise a clear, prioritized signal you can act on.
Get started freePaid plans: see pricing for Pro trial terms and cancellation.