Cosmos Vulnerability Scanner

Scans Cosmos SDK blockchains for 9 consensus-critical vulnerabilities including non-determinism, incorrect signers, ABCI panics, and rounding errors. Use when auditing Cosmos chains or CosmWasm contracts. (project, gitignored)

plurigrid 2442cd5 2 files · 2.3 KB Updated

File contents

Cosmos Vulnerability Scanner Skill

Trit: -1 (MINUS) Category: building-secure-contracts Author: Trail of Bits Source: trailofbits/skills License: AGPL-3.0

Description

Scans Cosmos SDK blockchains for 9 consensus-critical vulnerabilities including non-determinism, incorrect signers, ABCI panics, and rounding errors. Use when auditing Cosmos chains or CosmWasm contracts. (project, gitignored)

When to Use

This is a Trail of Bits security skill. Refer to the original repository for detailed usage guidelines and examples.

See: https://github.com/trailofbits/skills

Related Skills

  • audit-context-building
  • codeql
  • semgrep
  • variant-analysis

SDF Interleaving

This skill connects to Software Design for Flexibility (Hanson & Sussman, 2021):

Primary Chapter: 7. Propagators

Concepts: propagator, cell, constraint, bidirectional, TMS

GF(3) Balanced Triad

cosmos-vulnerability-scanner (−) + SDF.Ch7 (○) + [balancer] (+) = 0

Skill Trit: -1 (MINUS - verification)

Connection Pattern

Propagators flow constraints bidirectionally. This skill propagates information.

plurigrid/asi/tree/main/skills/cosmos-vulnerability-scanner commit 2442cd5304

Frequently asked questions

npx skillmds@latest add plurigrid/cosmos-vulnerability-scanner