Aderyn MCP: Open-Source Solidity Smart Contract Static Analyzer with Multi-Project & Multi-Format Reports

Aderyn

Aderyn is an open - source Solidity smart contract static analysis tool written in Rust, which helps developers and security researchers discover vulnerabilities in Solidity code. It supports Foundry and Hardhat projects, can generate reports in multiple formats, and provides a VSCode extension.

Security Developer tools #Static Analysis #Smart Contracts #Security Detection #Open - Source Tools .Rust

rating : 5 points

downloads : 18.1K

update time : 2025-09-25

Open Site

What is Aderyn?

Aderyn is an open - source public product development tool, a Solidity smart contract static analyzer built on Rust. It is specifically designed for protocol engineers and security researchers to discover potential security vulnerabilities and code issues in Solidity codebases.

How to use Aderyn?

Aderyn offers multiple installation methods and supports Foundry and Hardhat projects out - of - the - box. Simply run the 'aderyn' command in the root directory of your Solidity project to generate a detailed analysis report.

Use Cases

Aderyn is most suitable for smart contract development teams to conduct code audits, security researchers to perform vulnerability analysis, and blockchain projects to conduct security checks before deployment.

Main Features

Framework Support

Supports Foundry and Hardhat projects out - of - the - box, allowing you to start analysis without complex configuration.

Multiple Report Formats

Supports three report formats: Markdown, JSON, and Sarif, meeting different usage requirements.

Custom Detectors

Allows developers to build custom static analysis detectors to meet the needs of specific codebases and protocols.

VS Code Integration

Provides an official VS Code extension to directly identify Solidity code vulnerabilities in the editor.

Advantages

Open - source and free, available as a public product for the community to use.

Built on Rust, with excellent performance.

Supports mainstream Solidity development frameworks.

Offers multiple installation methods and is easy to use.

Has an extensible custom detector system.

Limitations

Windows users need to install the WSL environment.

Manual configuration of remappings.txt may be required for non - standard project structures.

It is a relatively new tool, and the community ecosystem is still developing.

How to Use

Choose an Installation Method

Choose a suitable installation method according to your operating system and preferences.

Verify the Installation

Check if Aderyn is installed correctly.

Run the Analysis

Run the analysis command in the root directory of your Solidity project.

View the Report

View the generated report file after the analysis is completed.

Usage Examples

Security Audit of Foundry Project

Conduct a comprehensive security analysis of a smart contract project using the Foundry framework.

Code Quality Check of Hardhat Project

Check the code quality and compliance with best practices of a Hardhat project.

Custom Detector Development

Develop custom static analysis rules for specific protocols or code specifications.

Frequently Asked Questions

How can Windows users install Aderyn?

Which Solidity versions does Aderyn support?

How to upgrade Aderyn to the latest version?

What types of vulnerabilities can Aderyn detect?

Related Resources

Official Documentation

Complete Aderyn usage guide and technical documentation.

VS Code Extension

Official VS Code extension that provides in - editor code analysis.

GitHub Repository

Project source code and issue tracking.

Discord Community

Join the community to discuss and get technical support.

Detector Development Guide

Learn how to build custom Aderyn detectors.

🚀 Aderyn - A Powerful Solidity Static Analyzer

Aderyn is an open - source public good developer tool. It's a Rust - based Solidity smart contract static analyzer that helps protocol engineers and security researchers find vulnerabilities in Solidity code bases.

🚀 Quick Start

Check out the Quick Start example with a video guide.

cd path/to/solidity/project/root
aderyn

This will generate a report.md.

You can see examples using more CLI options here.

✨ Features

Off - the - shelf support for Foundry projects.
Off - the - shelf support for Hardhat projects. (Sometimes remappings.txt may be required)
A configuration file (adeyrn.toml) is needed to support custom frameworks.
Markdown, JSON and Sarif reports

📦 Installation

⚠️ Important Note

Windows users must have WSL installed.

Using Cyfrinup

Cyfrinup is the cross - platform installation manager for Cyfrin tools.

Do the one - time setup.

Run aderyn --version to check the installation.

Run cyfrinup to upgrade everything to the latest version.

Using curl

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/cyfrin/aderyn/releases/latest/download/aderyn-installer.sh | bash

Upgrade older versions by running: aderyn - update

Using Homebrew

brew install cyfrin/tap/aderyn

Upgrade older versions by running: brew upgrade cyfrin/tap/aderyn

Using npm

npm install @cyfrin/aderyn -g

Upgrade older versions by (re)running: npm install @cyfrin/aderyn -g

If you are installing with Curl, Homebrew, or npm, make sure the correct version of Aderyn in your path comes from either the Homebrew or npm global packages directory. If an older version exists at ~/.cyfrin/bin/aderyn, remove it using rm -f ~/.cyfrin/bin/aderyn, as this is no longer the default installation location.

💻 Usage Examples

Basic Usage

cd path/to/solidity/project/root
aderyn

📚 Documentation

You can read the Cyfrin official documentation for an in - depth look at Aderyn's functionalities.

There is also an officially supported VSCode extension for Aderyn. Download it from the Visual Studio Marketplace and start identifying vulnerabilities in your Solidity code with ease.

🔧 Technical Details

Aderyn makes it easy to build Static Analysis detectors that can adapt to any Solidity codebase and protocol. This guide will teach you how to build, test, and run your custom Aderyn detectors. To learn how to create your custom Aderyn detectors, check out the official docs

📄 License

Help us build Aderyn 🦜 Please see our contribution guidelines for in - depth developer environment setup and PR approval process. Aderyn is an open - source software licensed under the GPL - 3.0 License.