Smart Contract Quick Audit

“Audit my Solidity contract”, “is this contract safe”, “Anchor program security check” — developers ask these before every testnet deploy. The Smart Contract Quick Audit runs inside ChatGPT: paste the source and get a graded report with findings, severity, line numbers and concrete fixes in seconds. The scan is free; a frontier-model deep audit with exploit paths and patched code is available for a flat USDC fee settled over the x402 payment protocol, with no account.

quick_audit detects the language and runs transparent static heuristics. For Solidity: state written after an external call without a reentrancy guard, privileged functions (mint, pause, upgrade, set-owner, fee setters) without access control, tx.origin authorisation, delegatecall and selfdestruct, block values used as randomness, unchecked low-level calls and ERC20 transfers, ecrecover without a zero-address check, loops bounded by dynamic arrays, pre-0.8 compilers without overflow checks and floating pragmas. For Anchor and native Rust: unchecked accounts without a CHECK comment, authority accounts that are not signers, init_if_needed, mutable accounts without has_one or constraint, PDA seeds without a bump, unchecked arithmetic, unwrap in program code, unvalidated remaining_accounts, CPI targets that are not pinned and account closes without an owner check.

deep_audit follows the x402 pattern: called without a payment it returns the terms — price in USDC, Solana network, recipient and reference — and once a confirmed transfer signature is supplied it verifies the payment on-chain, replays are rejected, and a frontier model reviews the contract line by line with the heuristic findings as context, returning a summary, findings and patched snippets. The same flow is available as a REST endpoint with an X-PAYMENT header for agents and CI.

Findings are rendered as an inline widget with severity badges, lines and fixes, and every result links to the TokenOS IDE to build and deploy the fixed contract with your own wallet. Heuristics and model reviews are a fast first pass, not a replacement for a professional audit, and no contract is ever declared fully secure. Try the scanner on the sample vault below or paste your own code.

• Free heuristic scan for Solidity and Solana (Anchor / Rust) with grade, line numbers and fixes
• Reentrancy, access control, tx.origin, delegatecall, randomness, unchecked calls and math
• Anchor: unchecked accounts, signer and ownership constraints, PDA bumps, CPI targets
• Deep audit by a frontier model, paid in USDC over x402 — no account