DETECTSecurity & safety
Jevscan-EVM
devtooligan@devtooligan
Jevscan-EVM is a tool that compares known vulnerability categories and checklist items against source code to identify potential bugs, functioning as a classifier.
jevscan-evm
Been playing around a lot with @typesafeai's Jev model, which is basically like a classifier.
Made a tool that takes all known vulnerability categories plus items from the Solodit checklist and evm-cortex and compares against source. The result is like a heat map of where the bugs are.
The results are decent - ok coverage, decent precision. It won't be replacing Zero Cool any time soon, but it's dirt cheap and wicked fast: a 12-file repo scans in ~7 seconds for ~7¢, no build step. Could be useful as a pre-check to guide an agentic or human auditor.
github.com/devtooligan/jevscan-evm