L3X detects vulnerabilities in Smart Contracts based on patterns and AI code analysis. Various LLMs act as validators for vulnerabilities detected by patterns and validate each other's results in AI code analysis. Vulnerabilities are confirmed when they receive confirmation from a majority of validators. As a result, a report with validated vulnerabilities and detected safe patterns is generated.
- Solana based on Rust
- Vulnerability Patterns Analysis: Analysis of smart contract code for vulnerability patterns.
- AI Code Analysis: Analysis of smart contract code for vulnerabilities using Language Model validators (LLMs).
- LLM Validators: Potential vulnerabilities detected are passed on to multiple LLM validators for confirmation. Three different models are utilized: GPT-4, Gemini, and Claude 2.
- Validation Process: Each validator independently assesses potential vulnerabilities. Detected vulnerabilities undergo a validation check.
- Decision Making:
- Valid: A vulnerability is confirmed as valid when at least two LLM validators agree.
- False Positive: A finding is marked as a false positive when identified as such by at least two validators.
- Cross-Validation: Each LLM performs a cross-validation check during the AI Code Analysis phase.
- Report Generation: A report is generated that compiles all confirmed vulnerabilities, with duplicates removed.
Currently it's MVP
- Vulnerabilities detects only based on vuln patterns
- GPT-3.5 act as validators for vulnerabilities detected by patterns
- GPT-3.5
- GPT-4 (Soon)
- Claude (Planned)
- Gemini (Planned)
Set the openai api key as an environment variable OPENAI_KEY in your operating system
Linux/Mac
export OPENAI_KEY=sk-ApiKeyExample
Windows
set OPENAI_KEY=sk-ApiKeyExample
- Build
cargo build
- Compile
cargo run
- Run
l3x smart-contracts-folder-to-analyse
DesignMVP concept- GPT-4 Integration 🔜
- Claude Integration
- Gemini Integration
- AI Code Analysis
- AI Code Analysis - Cross-Validation
- Refactor
- Accuracy Comparison
All suggestions write to contact contact@vulnplanet.com