AI-powered smart contract security auditor for Hardhat. Automatically finds vulnerabilities before deployment.
npm install hardhat-blockhertz0.1.0
Current Version
Free
Forever
MIT
License
Hardhat 3
Compatible
Three commands from install to a passing build.
npm install hardhat-blockhertzAdd plugin to hardhat.config.ts
npx hardhat blockhertz-auditPlugin scans all .sol files
Review findings by severityFix issues before deployment
Six vulnerability classes across the OWASP smart-contract top-10 plus gas hygiene.
Detects CEI pattern violations and unprotected external calls
Finds missing modifiers and unprotected privileged functions
Identifies spot price oracle usage vulnerable to flash loans
Flags unsafe math operations outside Solidity 0.8+
Suggests storage, loop and memory usage improvements
Catches zero address checks, input validation gaps and more
Copy the snippets below, run three commands, done.
npm install hardhat-blockhertz
The failOn option controls when the plugin fails your build.
| Value | Behavior | Best For |
|---|---|---|
"critical" | Fail on critical only | Production quick check |
"high" | Fail on high + critical | Recommended default |
"medium" | Fail on medium and above | Strict security |
"none" | Never fail build | Audit-only mode |
Add security auditing to every pull request. Blocks merges when critical vulnerabilities are found.
- name: Security Audit
run: npx hardhat blockhertz-audit
env:
BLOCKHERTZ_API_KEY: ${{ secrets.BLOCKHERTZ_API_KEY }}Get your free API key and install hardhat-blockhertz in 30 seconds.
Get Free API Key