Skip to content

Commit 794c609

Browse files
Koushik Gavinikoushkilla
authored andcommitted
added ShieldContract labs proposal
Signed-off-by: Koushik Gavini <gavinikoushik@gmail.com>
1 parent dada37d commit 794c609

File tree

1 file changed

+32
-0
lines changed

1 file changed

+32
-0
lines changed

labs/lfdt/ShieldContract.md

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
# Lab Name
2+
3+
ShieldContract Analyzer
4+
5+
# Short Description
6+
7+
ShieldContract Analyzer is a Rust-based CLI tool in ideation phase for smart contract security analysis, with a focus on verifying compliance with token standards (e.g., ERC-20, ERC-721, ERC-1155, ERC-777) and providing quick first-check security audits. It integrates with AI providers like OpenAI, Claude, and Gemini for cross-check analysis, helping institutions entering tokenization to rapidly identify vulnerabilities and ensure standards adherence.
8+
9+
# Scope of Lab
10+
11+
This lab develops a proof-of-concept CLI tool for blockchain smart contract security, currently supporting Hyperledger Fabric chaincode and Solana programs, with modular extensions for other platforms. Key functionalities include:
12+
13+
- **Standards Compliance Checking**: Validates if contracts follow token standards like ERC-20 (e.g., transfer functions, balances) and stablecoin best practices, detecting deviations that could lead to security issues.
14+
- **Security Vulnerability Detection**: Platform-specific checks, such as non-determinism in Fabric (e.g., time/rand usage), arithmetic overflows/underflows in Solana, missing signer/account validation, CPI security, and private data leaks.
15+
- **AI Cross-Check Analysis**: Connects to multiple LLMs (OpenAI, Claude, Gemini) for consensus-based validation of findings, AI-generated code patterns, and remediation suggestions – vital for quick, reliable first checks in institutional tokenization workflows.
16+
- **Reporting**: Outputs in JSON, Markdown, HTML, and SARIF for CI/CD integration.
17+
- **Other Features**: Interactive mode, custom rules, Docker support, and configuration via TOML. Stubbed/planned features include full auditing.
18+
19+
As enterprises and business solutions are looking into developing web3 products such as institutional tokenization and stable coins, there is a pressing need for a quick CLI analyzer tool for smart contracts to see if it meets the standards and that it can fit into a CI/CD workflow. As institutions increasingly tokenize assets, this tool provides a "quick first check" for smart contracts, combining static analysis with AI to flag non-compliance and vulnerabilities early. It aligns with Hyperledger's ecosystem (e.g., Fabric integration) and could expand to support more standards/AI providers. The project is in early ideation (v0.2.0), with some features limited.
20+
21+
# Initial Committers
22+
23+
- https://github.com/KoushikGavini
24+
25+
26+
# Sponsor
27+
28+
29+
30+
# Pre-existing repository
31+
32+
- https://github.com/KoushikGavini/ShieldContract

0 commit comments

Comments
 (0)