cosmos-vulnerability-scanner

SKILL.md

Systematically scan Cosmos SDK blockchain modules and CosmWasm smart contracts for platform-specific security vulnerabilities that can cause chain halts, consensus failures, or fund loss. This skill encodes 9 critical vulnerability patterns unique to Cosmos-based chains.

When vulnerabilities are found, you'll get a report like this:

Search for non-deterministic patterns grep -r "range.map\[" x/ grep -r "\bint\b\|\buint\b" x/ | grep -v "int32\|int64\|uint32\|uint64" grep -r "float32\|float64" x/ grep -r "go func\|go routine" x/ grep -r "select {" x/ grep -r "time.Now()" x/ grep -r "rand\." x/

Analiza las cadenas de bloques de Cosmos SDK en busca de 9 vulnerabilidades críticas para el consenso, incluido el no determinismo, firmantes incorrectos, pánicos ABCI y errores de redondeo. Úselo al auditar cadenas Cosmos o contratos CosmWasm. Fuente: trailofbits/skills.

Ver original