SuperAudit is a comprehensive security analysis plugin for Hardhat that detects vulnerabilities through advanced Control Flow Graph analysis, reentrancy detection, and AI-powered insights.
npm install hardhat-superaudit
Advanced detection capabilities that go beyond basic linting
Built on an agentic smart-contract auditing framework that combines custom AST analysis with specialized AI agents. Multiple agents collaborate to detect vulnerabilities, reason across code components, and provide detailed security insights powered by GPT-4 and Claude.
Sophisticated CFG analysis detects vulnerabilities through execution path analysis
Advanced attack path identification with detailed exploit scenarios and mitigation strategies
Programmable, shareable audit strategies for consistent security reviews
SARIF format support for seamless CI/CD and GitHub Code Scanning integration
Runs audits inside a gVisor-based sandbox to safely execute untrusted code and automate security workflows without risk to your system
Next-generation security analysis powered by specialized AI agents
Specialized AI agents work together to analyze different aspects of your smart contracts - from AST parsing to vulnerability detection and fix generation.
Builds relation-first knowledge graphs to reason across multiple abstraction layers, understanding authentication flows, value transfers, and protocol invariants.
Maintains persistent vulnerability hypotheses that evolve as evidence accumulates, similar to how expert auditors reason about complex systems.
Runs all analyses in a gVisor-based sandbox environment, ensuring complete isolation when executing potentially malicious code.
Join innovative companies securing their smart contracts with SuperAudit
Start securing your contracts in under a minute
npm install hardhat-superaudit
import superauditPlugin from "hardhat-superaudit";
npx hardhat superaudit
Join developers securing their contracts with SuperAudit