AI security audits that prove themselves.

Connect a repository and get a full smart contract audit in 2 to 10 hours, depending on code size, with a verdict on every finding. Run a pre-audit before a manual review.

Audit my contractsSee a sample report

acme-labs/lending-protocol

Download reportShare
critical severityLEN-1

isolateLiquidate pays NFT to caller instead of auction winner (lastBidder)

security bugIsolateLogic.sol
high severityLEN-3

depositERC721 accepts tokenIds with stale lockerAddr after isolate liquidate exit

security bug·BVaultVaultLogic.sol
high severityLEN-5

Lido unstake sends full stETH balance in one request above 1000 ETH cap

security bugYieldEthStakingLido.sol
high severityLEN-6

Native unwrap pulls WETH from msgSender while liquidity was sent to receiver

security bugVaultLogic.sol
high severityLEN-7

Decimal-mismatched Chainlink answers let a borrower pass HF/LTV gates and over-extract liquidity

security bugPriceOracle.sol
high severityLEN-69

Yield repay tops up shortfall from nftOwner without balance-delta guard before pool yieldRepayERC20 pull

security bugYieldStakingBase.sol

Real output from a Guardix run, repository shown under a placeholder name.

supports:

Ethereum
Arbitrum
Optimism
Base
Polygon

Guardix is a team of AI agents working in an exploit-ready environment. They read, fuzz and attack your contracts in as many ways as they can, to surface everything from simple mistakes to the most complex multi-step exploits.

PoolVaultOracleLiquidation

Architecture first

It maps contracts, roles and value flows before it looks for a single bug.

Findings
68
Observations
51
Rejected
19

A verdict on every finding

Confirmed findings, design observations and rejected false positives, across all 138 results of a real run.

104/117

Measured in public

104/117 on the EVMBench benchmark.

Code audit

A full audit, while you keep shipping

Over 2 to 10 hours, depending on code size, it reads the code, maps the system and works through every category a reviewer would, then hands back a report where each finding already has a verdict.

See a sample report

AI audit tools are known for noise. Guardix gives every finding a verdict (confirmed, dismissed or design tradeoff) and cites the exact lines, so you know what to fix first. Compare that with a smart contract scanner or an AI smart contract audit tool. AI pre-audit with verified findings Smart contract audit for DeFi protocols

critical severityLEN-1

isolateLiquidate pays NFT to caller instead of auction winner (lastBidder)

security bugIsolateLogic.sol
Confirmed
high severityLEN-55

Lido submit() share return mixed with balanceOf pooled-ETH accounting

security bugYieldEthStakingLido.sol
Confirmed
high severityLEN-91

External interest rate model is a single point of failure per asset group

by designInterestLogic.sol
By design

Properties

Review
Open
Component
IsolateLogic
Class
Front Running Attack
security bugConfirmed

isolateLiquidate pays NFT to caller instead of auction winner (lastBidder)

src/libraries/logic/IsolateLogic.sol:471-478+2
Fix in Cursor

After an isolate auction ends, executeIsolateLiquidate transfers the liquidated ERC721 to params.msgSender without comparing the caller to loanData.lastBidder. Any account can front-run the winning bidder's settlement transaction and capture the NFT while the winner's escrowed bid is consumed to repay pool debt.

Impact

The highest isolate-auction bidder can lose 100% of their escrowed bid value plus the NFT: bid tokens are applied to debt repayment (and any excess goes to the borrower), while an arbitrary frontrunner receives the collateral NFT worth the winning bid.

Attack scenario

Alice wins a post-auction isolate loan with a 50 WETH bid. After auctionDuration elapses, Bob monitors the mempool and calls isolateLiquidate before Alice. Bob receives the BAYC NFT; Alice's 50 WETH bid is debited from totalBidAmout to cover debt and any surplus is sent to the borrower, leaving Alice with no NFT and no refund.

Source

src/libraries/logic/IsolateLogic.sol:471-478executeIsolateLiquidate()
470
471 // transfer erc721 to bidder
472 if (params.supplyAsCollateral) {
473 VaultLogic.erc721TransferIsolateSupplyOnLiquidate(nftAssetData, params.msgSender, params.nftTokenIds);
474 } else {
475 VaultLogic.erc721DecreaseIsolateSupplyOnLiquidate(nftAssetData, params.nftTokenIds);
476
477 VaultLogic.erc721TransferOutLiquidity(nftAssetData, params.msgSender, params.nftTokenIds);
478 }

Activity

No activity on this sample finding.

  • System map

    Contracts, roles and value flows, drawn before the hunt starts.

  • Source-linked evidence

    Every finding cites the exact lines it is about.

  • Verdicts, not maybes

    Confirmed, dismissed or design tradeoff, with the reasoning.

  • Shareable report

    Send one link to your team or auditors, no account needed.

  • PDF export

    A clean report for partners, investors and governance.

  • Re-audit any commit

    Run again after fixes and compare against the last scan.

Release audit

Someone audited it. Should you trust it?

Upload the audit reports for a protocol you depend on or are about to ship. Guardix checks them against the code, the scope and the deployment, and scores how much the audit actually covers.

See a sample scorecard

  • Report against code

    Checks the audited commit and scope against what you are about to trust.

  • Scope reconciliation

    Shows which contracts the report covered and which changed after it.

  • Auditor credibility

    Weighs who did the audit and how the findings were handled.

  • Privileged roles

    Lists who can pause, upgrade or move funds, and how.

  • Deployment check

    Probes the deployed contracts you point it to, on any EVM chain.

  • One score, with reasons

    Every criterion explains itself and cites the findings behind it.

One price per audit

No subscriptions and no seats. See how much a smart contract audit costs.

Pricing details

Code audit

$200per repository, per commit

Any size codebase. Re-audit after fixes at the same price.

Release audit

$200per release

Bring as many audit reports and sources as the release has.

From the blog

Audit your next commit.

Connect a repository and come back to a verdict on every finding.

Audit my contractsVerify someone else's audit