Introduction

Chainvet is a hybrid security analyzer for Solidity smart contracts. It combines three engines over a shared frontend and IR — static analysis (45+ detectors), symbolic execution (Z3), and coverage-guided fuzzing — plus a hybrid mode that runs them as one feedback loop: static analysis steers symbolic execution, whose concrete witnesses seed the fuzzer, whose coverage stalls trigger further symbolic assists.

Findings are merged, deduplicated, and tagged with a confidence level (high / medium / low) reflecting how precise the detector that reported them is.

Why Chainvet

• One analyzer, many front ends. The same engine powers a CLI, a CI binary (SARIF), a REST server, and a language server — so local audits, pipelines, and your editor all agree.
• Hybrid by default. Instead of running detectors, a symbolic engine, and a fuzzer in isolation, Chainvet wires them into a loop that reaches deeper bugs.
• Two axes, not one. Every finding carries both a severity (impact) and a confidence (the detector's own precision) so you can triage by what matters.
• Audit-ready output. Emit a Cyfrin-style audit report (Markdown, HTML, or PDF) straight from a scan.

The ecosystem

Chainvet is a Cargo workspace of pure engine libraries behind a single scan() facade, with thin front ends that render the result. Integrations live in their own repositories.

The four binaries

All are installable from a single script — see Installation.

License

Chainvet is open source under the MIT license.