Who developed this vulnerability scanner?

The logic and patterns for this skill were developed by Trail of Bits, a leading cybersecurity research and auditing firm.

What kind of vulnerabilities does this skill find?

It scans for nine specific consensus-critical issues, including non-determinism, incorrect signers, ABCI panics, and various rounding errors.

Does it work with CosmWasm?

Yes, the scanner is designed to audit both the underlying Cosmos SDK infrastructure and the smart contracts written in CosmWasm.

What is the Cosmos Vulnerability Scanner skill?

It is a specialized security tool for Claude Code that automates the detection of critical vulnerabilities in blockchains built with the Cosmos SDK.

Is this a replacement for a manual security audit?

No, this skill is a powerful automated aid for identifying known vulnerability patterns, but it should be used as part of a comprehensive manual security review.

Cosmos Vulnerability Scanner

Name: Cosmos Vulnerability Scanner
Author: plurigrid

byplurigrid

•

Security & Testing

Scans Cosmos SDK blockchains and CosmWasm contracts to detect consensus-critical vulnerabilities and security flaws.

About

Developed by Trail of Bits, this skill empowers Claude to perform specialized security audits on Cosmos SDK blockchains and CosmWasm smart contracts. It specifically targets nine consensus-critical vulnerability classes, including non-determinism, incorrect signer validation, ABCI panics, and rounding errors. By integrating these automated checks into the development workflow, teams can identify high-risk architectural flaws that could lead to chain halts or financial exploits before they reach production.

Key Features

Scans for incorrect signer validation in transaction handling
Tailored for both Cosmos SDK modules and CosmWasm contracts
Detects 9 distinct consensus-critical vulnerability patterns
2 GitHub stars
Identifies non-determinism risks in blockchain state machine logic
Flags potential ABCI panics that could cause chain halts

Use Cases

Reviewing CosmWasm smart contracts for consensus-breaking bugs
Performing security audits on new Cosmos SDK modules and app-chains
Pre-deployment security hardening and vulnerability scanning

About

Key Features

Scans for incorrect signer validation in transaction handling
Tailored for both Cosmos SDK modules and CosmWasm contracts
Detects 9 distinct consensus-critical vulnerability patterns
2 GitHub stars
Identifies non-determinism risks in blockchain state machine logic
Flags potential ABCI panics that could cause chain halts

Use Cases

Reviewing CosmWasm smart contracts for consensus-breaking bugs
Performing security audits on new Cosmos SDK modules and app-chains
Pre-deployment security hardening and vulnerability scanning