Automated Solidity audit that finds reentrancy vulnerabilities, pinpoints gas inefficiencies, and provides concrete, fixable code patches and tests.
Please audit the following staking contract for reentrancy risks, gas issues, and other security concerns. Provide fixes and test recommendations. pragma solidity ^0.8.4; contract
1) Executive summary The contract contains a critical reentrancy vulnerability in unstake(): it performs an external call to msg.sender before zeroing the user's balance. emergencyWithdraw additionally uses tx.origin for authorization and also updates state after the external transfer. Missing declaration/initialization of owner is present. Top gas concerns: unnecessary repeated storage accesses (SLOAD/SSTORE), non-immutable owner, and lack of simple micro-optimizations (caching storage into memory, fewer SSTOREs) that would reduce gas. 2) Verdict & severity - Critical — Reentrancy in unstake(): external call to msg.sender.call{value: amount}("") happens before stakes[msg.sender] is
Cut short here. Run it to get the whole answer.
Run Solidity Audit from anywhere
Right here
Fill in the box above and the answer comes straight back. No account, no signup.
Open the run boxIn your Discord server
Add the amnt bot to your server. Anyone types /run, picks Solidity Audit from the list, and the answer appears in the channel for everyone to see. Each person links their amnt account once with /link so their own credits pay for their own runs.
Add the bot to Discord/run agent: solidity-audit prompt: what you wantFrom Claude, Cursor, or any MCP client
Point your MCP client at amnt with an API key and Solidity Audit shows up as a tool your assistant can call on its own.
How to connecthttps://amnt.io/api/mcpFrom your own code
One HTTP call with an API key. Credits are charged per run and the result comes back in the same response.
Developer docscurl -X POST https://amnt.io/api/v1/run \ -H "Authorization: Bearer amnt_sk_..." \ -H "Content-Type: application/json" \ -d '{"agent":"glassy_puffin/solidity-audit","input":{"prompt":"..."}}'
What it costs
No subscription, no minimum. Pay from your Balance, or with USDC on Base, Solana or Hedera. The creator keeps 100% of every run.
Questions
- What does Solidity Audit do?
- Solidity Audit is Automated Solidity audit that finds reentrancy vulnerabilities, pinpoints gas inefficiencies, and provides concrete, fixable code patches and tests., created by @glassy_puffin. Describe what you want, pay once, and get the result in the same response.
- How much does Solidity Audit cost?
- $0.02 per run. You only pay when you use it - no subscription, no monthly fee, no minimum spend.
- Do I need an account to use Solidity Audit?
- No. Pay with USDC from your own wallet, or sign in and pay from your Balance. There is nothing to subscribe to and nothing to cancel.
- Can I call Solidity Audit from my own code?
- Yes. POST to /api/agent/glassy_puffin/solidity-audit with an x402 payment header and the required inputs. The result comes back in the same HTTP response - no API key, no account.
Details
How it works, proof it works, and how to call it from code
How it's performing
Three steps
- Tell it what you want
Fill in the box. No prompt-writing - the recipe is already built in.
- Pay once, per run
$0.02 a run. No subscription, no minimum, no account. You pay only when you press run.
- Get the result in the same reply
Solidity Audit returns your result immediately. Run it again with different inputs any time.
Use it from your own code
Solidity Audit is a live HTTP endpoint. POST to it with an x402 payment header and the result comes back in the same response - no API key, no account.
curl -X POST https://amnt.io/api/agent/glassy_puffin/solidity-audit \
-H "Content-Type: application/json" \
-H "X-Payment: <x402-payment-header>" \
-d '{ "prompt": "..." }'