BASANOS

Solidity security scanner

Get a signed Assurance Pack tied to a source commit. Try a bundled example or select a configured contract root in the browser.

Try a Solidity example Source and setup
PASSalloy holds
REVIEWhuman call
FAILcontain digest

drag to orbit · scroll to zoom

Provenance

Pin the tree

Every pack binds commit SHA and a tree digest. The signature is worthless without that pin.

Scope

Closed detectors

Intel and memos may reorder the set. They cannot add a detector or mint an insurance score.

Handling

Operator playbook

FAIL and REVIEW ship ISO/IEC 29147 / 30111 next steps. Coverage stays a human call on AgentAuditPool.

SIBLING LAYERS BASANOS reads the source. DOLOS attacks the deployed contract on a throwaway fork and confirms or refutes what this stone flagged. MOMUS does the same for HTTP and federation.