Back to Home
Cyfrin icon

aderyn

Verified Safe

by Cyfrin

Overview

A Rust-based Solidity static analyzer that identifies vulnerabilities in smart contracts and provides developer tooling such as LSP and an MCP server for integration with other development environments and AI agents.

Installation

Run Command
aderyn mcp stdio

Environment Variables

  • FOUNDRY_PROFILE
  • ADERYN_LOG
  • FORCE_COLOR

Security Notes

The project is implemented in Rust, which inherently reduces many common memory-related vulnerabilities. It serves as a local development tool with capabilities for static analysis, LSP, and an MCP server. The `xtask` commands can perform sensitive operations like Git pushes and cargo releases, but these are intended for developer/CI environments and not directly exposed by the runtime servers. The MCP server binds to `127.0.0.1` by default for HTTP streaming, limiting network exposure. No obvious malicious patterns, hardcoded secrets, or `eval`-like constructs were found for arbitrary code execution in the server components.

Similar Servers

Stats

Interest Score68
Security Score9
Cost ClassMedium
Avg Tokens750
Stars705
Forks103
Last Update2026-01-19

Tags

Soliditystatic analysissmart contractssecurityRust