Substrate Vulnerability Scanner

About

The Substrate Vulnerability Scanner is a specialized security tool developed by Trail of Bits for auditing Substrate-based blockchain runtimes. It automates the detection of critical flaws such as arithmetic overflows, panic-driven Denial of Service (DoS) vectors, incorrect weight assignments, and improper origin checks within FRAME pallets. By integrating these security patterns into Claude Code, it allows developers and auditors to catch complex blockchain-specific bugs early in the development lifecycle, ensuring the robustness and safety of Polkadot ecosystem projects.

Key Features

• Analyzes FRAME pallets for domain-specific security anti-patterns
• Detects arithmetic overflows and underflows in pallet logic
• 2 GitHub stars
• Checks for missing or incorrect origin authorization and access control
• Identifies potential panic-induced Denial of Service vectors
• Validates weight calculations to prevent resource exhaustion

Use Cases

• Performing a security audit on custom Substrate runtime pallets
• Verifying transaction weights before deploying to a Polkadot parachain
• Automating vulnerability scanning during the development of blockchain contracts