jevscan-evm: a Jev-based vulnerability heat map for smart contracts
The developer uses Jev as a classifier to scan source code against vulnerability categories and the Solodit checklist, taking about 7 seconds and 7 cents for a 12-file repo as a pre-audit check.
jevscan-evm Been playing around a lot with @typesafeai's Jev model, which is basically like a classifier. Made a tool that takes all known vulnerability categories plus items from the Solodit checklist and evm-cortex and compares against source. The result is like a heat map of where the bugs are. The results are decent - ok coverage, decent precision. It won't be replacing Zero Cool any time soon, but it's dirt cheap and wicked fast: a 12-file repo scans in ~7 seconds for ~7¢, no build step. Could be useful as a pre-check to guide an agentic or human auditor. https://github.com/devtooligan/jevscan-evm