Security Modules

Beyond the scan pipeline, Hawk-i ships four focused security modules as standalone subcommands. Each answers one sharp question about a contract.

verify - source matches deployed bytecode

Compare the bytecode of a deployed contract against your local source, so you can detect source that does not match what is actually running on-chain.

$ hawki verify --address 0xYourContract --chain ethereum --source ./contracts

deps - dependency vulnerability scanning

Flag known-vulnerable library and package versions in the project's dependency set.

$ hawki deps ./my-project

upgrade - proxy storage-collision safety

For upgradeable contracts, check whether a new implementation is storage-layout compatible with the old one. Storage collisions across an upgrade are a classic source of catastrophic bugs.

$ hawki upgrade --old ./OldImpl.sol --new ./NewImpl.sol

prove - formal verification

Run formal verification via SMTChecker. Verification engines are auto-discovered; select one with --engine.

$ hawki prove ./contracts --engine smtchecker