Static Code Analyzer
Catch critical smart contract bugs before deployment
Vanguard is static code analyzer developed by Veridise. It’s designed to automatically find bugs in smart contract code deeply and efficiently.
Integrated into AuditHub, Vanguard static code analyze helps developers get detailed reports about vulnerabilities in their Solidity projects. We’ve especially optimized Vanguard to minimize false alarms, so developers can focus on the bugs that matter to them.
What is Vanguard?
Vanguard is a static analysis engine and static code analyzer tailored to the unique semantics of smart contracts. Unlike linting tools, Vanguard uses AI (abstract interpretation) to reason about the smart contract code, allowing it to:
- Understand how interleaved transactions across multiple contracts could cause high-severity issues like reentrancy
- Identify unsafe token transfer patterns
- Detect common bugs such as incorrect access controls, unchecked call statuses, and missing data validation
This focused approach reduces noise and surfaces only meaningful findings — making Vanguard an ideal static code analyzer for secure smart contract development.
Core features
CI/CDfriendly
Runs on your Hardhat or Foundry project with minimal setup required. Integrates seamlessly into development pipelines, enabling continuous monitoring and preventing regressions during refactors. Get vulnerability reports delivered straight into GitHub Actions.
Advancedvulnerability triage
Through AuditHub, Vanguard allows developers to easily triage reported findings. Related findings are grouped together, and root causes can be marked to eliminate false alarms in bulk.
Customdetectors
If you have vulnerability patterns specific to your codebase, you can write your own detectors using Vanguard’s custom query language. Utilize Vanguard’s advanced static analysis engine to perform value flow analysis, static call tracing, and more.
Use cases
Early-stage safety check
Catch critical security vulnerabilities during development to avoid redesigning your entire protocol later on.
Synergy with formal audits
Run Vanguard before a lengthy manual audit to uncover bugs ahead of time and get a more positive audit report.
Regression protection
Automatically check that patches haven’t introduced new vulnerabilities.
Built for smart contracts
Vanguard is specifically engineered to address blockchain’s immutable and adversarial environment. By analyzing both code and intent, this static code analyzer uncovers deep logic flaws that generic analyzers often miss — making it an essential tool for DeFi, token, governance, and vault contracts.
Why choose Vanguard?
Unlike competing tools, Vanguard reasons deeply about value flow and transaction semantics to detect high-impact vulnerabilities
Vanguard is carefully tuned to provide concise, accurate reports that focus on the vulnerabilities that matter
Fits seamlessly into CI/CD and audit workflows
Backed by Veridise’s world-class static analysis, formal verification, and security research
Try Vanguard today
When you choose Veridise as your security auditor, you’ll get access to Vanguard static code analyzer via our AuditHub platform. No extra fees, no setup required.
Stay tuned — standalone access to AuditHub will be available later this year.