CodeHound is an AI-enhanced smart contract auditing tool designed to automate and accelerate security reviews for Solidity projects. By combining OpenAI-derived AI analysis with traditional static and dynamic scanners, CodeHound aims to identify vulnerabilities, highlight security risks, and deliver actionable recommendations, whether you’re auditing a single Solidity file or an entire Hardhat/Truffle project.
Overview
- AI-powered vulnerability detection supplemented by hundreds of detectors from trusted static/dynamic scanners.
- Supports a wide range of environments and networks (Ethereum Mainnet, Sepolia, BNB, Base, Polygon, Arbitrum, Fantom, and more).
- Produces a detailed PDF report after each audit, listing findings, risk levels, and recommended fixes.
- Integrates with development workflows via VSCode extension and upcoming GitHub integration for seamless in-IDE or repository-based auditing.
How It Works
- Upload or connect your Solidity project (single file to entire project).
- Run automated AI analysis in concert with established vulnerability detectors for thorough coverage (reentrancy, integer overflows, gas-related issues, etc.).
- Review findings in the audit report and implement recommended fixes.
- Access downloadable reports and integrate audits into your development lifecycle.
Features
- AI-assisted smart contract auditing with a fine-tuned model (GPT-4o) and 200B+ parameters for deep analysis
- Hybrid approach combining AI with hundreds of established vulnerability detectors
- Coverage for common security issues: reentrancy, overflows, gas inefficiencies, etc.
- Detailed PDF audit reports with findings, risk levels, and remediation guidance
- VSCode extension for in-IDE audits and immediate security feedback
- GitHub integration coming soon to fetch and analyze code directly from repositories
- Plans to scale from personal projects to large teams and complex deployments
How to Use CodeHound
- Sign up and access the CodeHound dashboard or install the VSCode extension.
- Connect your project and select the codebase you want audited.
- Choose a plan (Personal, Newbie, or Business) or start with a free trial where available.
- Run an audit, review the generated PDF report, and apply suggested fixes.
- (Coming soon) Connect to GitHub to automatically analyze code from repositories and track vulnerabilities over time.
Plans & Pricing
- Personal: £19 / month • Unlimited scans • 10k lines of code • GitHub connect • Team access • Custom API key
- Newbie: Free / month • 2,000 free lines of code • Unlimited scans • No credit card required • Team access • Custom API key
- Business: £99 / month • Unlimited scans • 50k lines of code • GitHub connect • Team access • Custom API key
For larger deployments and enterprise needs, dedicated pricing and onboarding are available by contacting their team.
Network & Environment Support
- Ethereum Mainnet and Sepolia
- BNB Mainnet and Testnet
- Base Mainnet
- Polygon Mainnet and zkEVM
- Arbitrum Mainnet and Testnet
- Fantom Mainnet
Safety and Legal Considerations
- AI-assisted audits provide guidance but do not replace formal security reviews.
- Ensure you have permission to audit third-party contracts and comply with all applicable laws and licensing.
Quick Start
- Install/Access CodeHound (dashboard or VSCode extension).
- Upload or connect your Solidity project.
- Run an audit and review the PDF report with findings and fixes.
- Plan the next steps for remediation and regression testing.