4. Security Modules
v1.0.0 ships four standalone security modules alongside the scan pipeline:
- verify - compare deployed on-chain bytecode against local source, to catch source that does not match what is running.
- deps - dependency vulnerability scanning for known-vulnerable library and package versions.
- upgrade - proxy storage-collision safety, checking that a new implementation is storage-layout compatible with the old one.
- prove - formal verification via SMTChecker, with auto-discovered engines selected by
--engine.