cosmos-vulnerability-scanner

SKILL.md

Systematically scan Cosmos SDK blockchain modules and CosmWasm smart contracts for platform-specific security vulnerabilities that can cause chain halts, consensus failures, or fund loss. This skill encodes 9 critical vulnerability patterns unique to Cosmos-based chains.

When vulnerabilities are found, you'll get a report like this:

Search for non-deterministic patterns grep -r "range.map\[" x/ grep -r "\bint\b\|\buint\b" x/ | grep -v "int32\|int64\|uint32\|uint64" grep -r "float32\|float64" x/ grep -r "go func\|go routine" x/ grep -r "select {" x/ grep -r "time.Now()" x/ grep -r "rand\." x/

扫描 Cosmos SDK 区块链是否存在 9 个共识关键漏洞，包括非确定性、不正确的签名者、ABCI 恐慌和舍入错误。在审计 Cosmos 链或 CosmWasm 合约时使用。 来源：trailofbits/skills。

查看原文