lcfr-eth / smart-contract-vulndb

🍋 An open dataset containing smart contract audit issues from various sources.

[ 🌐 🫂 ]

Smart Contract VulnDB

An open dataset of publicly available smart contract issues aggregated from various audit reports. The dataset can be accessed at 🌻 vulns.json, is updated once a day, and a live demo is available 🌐 here.

^{LMK if you're building cool things with this dataset and I'll list them here 😊🙏}

🔸 DataSet

const issue: Issue = {
  title: "<string:title>",
  severity: Severity.Medium,
  body: "<markdown-string:description>",
  dataSource: {
    name: "<string:path-like-report-identifier>",
    repo: "<string:git-or-http-url>",
    url: "<string:url>"
  }
};

• vulns.json

🔸 Live Demo

• Demo

🔸 Accessing the Latest Snapshot

• Shell

⇒  curl https://tintinweb.github.io/smart-contract-vulndb/cache/vulns.json

• JavaScript

fetch('https://tintinweb.github.io/smart-contract-vulndb/cache/vulns.json')
  .then(response => response.text())
  .then(data => {
    // Process the retrieved data
    const issues = data.split('\n').filter(l => l.trim().length > 0).map(l => JSON.parse(l))
    console.log(issues);
  })
  .catch(error => {
    // Handle any errors that occurred during the request
    console.error('Error:', error);
  });

• NodeJs
• TypeScript
• Python

🤓 For Nerds

First, run the development server:

npm run dev
# or
yarn dev

Open http://localhost:3000 with your browser to see the result.