Is this tool suitable for general Rust security audits?

While it can find general Rust issues like panics and overflows, its logic is highly specialized for the Substrate FRAME framework and pallet-specific macros like #[pallet::call] and #[pallet::weight].

What specific Substrate vulnerabilities does this skill detect?

It identifies 7 critical patterns: arithmetic overflow, panic-induced DoS, incorrect weights/fees, storage write order (Verify First, Write Last), unsigned transaction flaws, weak randomness, and bad origin checks.

Does it support the latest Substrate transactional storage features?

Yes, it specifically checks for Substrate version 0.9.25+ compatibility and ensures that storage writes are protected by transactional attributes to prevent state corruption.

Can this skill help with weight benchmarking?

While it doesn't run the benchmarks itself, it reviews weight calculation functions and logic to ensure they are proportional to computational costs and include bounded input parameters.

Substrate Vulnerability Scanner

Name: Substrate Vulnerability Scanner
Author: trailofbits

bytrailofbits

•

2,992

•

Security & Testing

Scans Substrate and Polkadot pallets for critical security vulnerabilities like arithmetic overflows, panic-driven DoS, and improper origin checks.

The Substrate Vulnerability Scanner is a specialized security tool designed for auditors and developers working within the Polkadot and Substrate ecosystems. It systematically analyzes Rust-based FRAME pallets to identify seven critical vulnerability patterns, including arithmetic safety, DoS vectors via panics, incorrect weight accounting, and unauthorized origin access. By encoding Trail of Bits' deep security expertise into automated workflows, this skill helps ensure the integrity of parachains and standalone Substrate networks during development and pre-launch assessments.

Key Features

01Provides automated remediation guidance and testing recommendations for identified issues.

02Analyzes dispatchable extrinsic functions for proper weight and fee validation.

032,992 GitHub stars

04Verifies storage safety patterns like 'Verify First, Write Last' for state integrity.

05Detects 7 critical Substrate-specific vulnerability patterns including arithmetic and origin flaws.

06Identifies panic-prone code (unwrap/expect) that could lead to node-level DoS attacks.

Use Cases

01Continuous security scanning of custom FRAME pallets during the Rust development lifecycle.

02Performing pre-launch security audits for Polkadot parachains and standalone Substrate runtimes.

03Validating weight benchmarks and resource accounting to prevent spam and DoS attacks.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add trailofbits/skills substrate-vulnerability-scanner

For use in Claude.ai and ChatGPT

Download Skill