{"slug":"agent402-tools-api-solidity-scan-72393f","title":"Deterministic static pattern scan of Solidity smart-contract source text","host":"agent402.tools","method":"POST","resource":"https://agent402.tools/api/solidity-scan","category":"other","description":"Deterministic static pattern scan of Solidity smart-contract source text - a fixed ruleset flagging tx.origin authentication, delegatecall, selfdestruct, unchecked low-level calls, unchecked .send(), floating pragmas, block-timestamp dependence, weak block-derived randomness, value-call reentrancy s","price_listed":0.01,"price_asked":null,"state":"effects","state_label":"Not tested: has real-world effects","checks_7d":0,"answered_7d":0,"latency_ms_median":null,"reported_calls_30d":5,"reported_payers_30d":1,"networks":["algorand:wGHE2Pwdvd7S12BL5FaOP20EGYesN73ktiC1qzkkit8=","eip155:10","eip155:1329","eip155:137","eip155:143","eip155:42161","eip155:42220","eip155:43114","eip155:4663","eip155:8453","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","stellar:pubnet"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"body":{"source":"pragma solidity ^0.8.0;\ncontract Wallet {\n  function drain(address payable to) external {\n    require(tx.origin == msg.sender);\n    to.call{value: address(this).balance}(\"\");\n  }\n}"},"bodyType":"json","method":"POST","type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"body":{"properties":{"source":{"description":"Solidity source text to scan (max 512KB).","type":"string"}},"required":["source"]},"bodyType":{"enum":["json","form-data","text"],"type":"string"},"method":{"enum":["POST"],"type":"string"},"type":{"const":"http","type":"string"}},"required":["type","method","bodyType","body"],"type":"object"},"output":{"properties":{"example":{"properties":{"disclaimer":{"type":"string"},"findings":{"items":{"properties":{"line":{"type":"integer"},"message":{"type":"string"},"rule":{"type":"string"},"severity":{"type":"string"},"snippet":{"type":"string"}},"type":"object"},"type":"array"},"lines":{"type":"integer"},"summary":{"properties":{"high":{"type":"integer"},"info":{"type":"integer"},"low":{"type":"integer"},"medium":{"type":"integer"}},"type":"object"}},"required":["lines","findings","summary","disclaimer"],"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[],"description_full":"Deterministic static pattern scan of Solidity smart-contract source text - a fixed ruleset flagging tx.origin authentication, delegatecall, selfdestruct, unchecked low-level calls, unchecked .send(), floating pragmas, block-timestamp dependence, weak block-derived randomness, value-call reentrancy surface, inline assembly, ecrecover, and missing SPDX headers. Returns line-anchored findings with severities.","last_updated":"2026-09-21T11:07:28.09Z","schemes":["exact","upto"]}