# ContractScan

> ContractScan (https://contract-scan.dev) checks single-file Solidity smart contracts before deployment. It runs Slither and Aderyn static analysis plus rug-pull pattern heuristics, then explains findings in plain English and Chinese and gives a verdict: Deployable, Fix first, or Do not deploy. It is NOT an audit.

Key facts:
- Audience: developers and "vibe coders" who write Solidity with AI assistants, and coding agents that want a pre-deploy check.
- The verdict is computed from static-analysis findings; AI only writes explanations and optional patches.
- Code is compiled and analysed in a network-less sandbox and never executed.
- Limits: single file, <=2000 lines / 250 KB, only OpenZeppelin imports (v4.9/v5), solc 0.8.0-0.8.30.
- Pricing: free 3 scans/day (verdict + top 3 findings); $3 USDC = 1 full scan with all findings and an auto-fix patch; $10 USDC = 5 full scans. Paid with a plain USDC transfer on Base; no wallet signatures.
- Interfaces: web UI, JSON API (POST /api/scan), MCP stdio server with tool `scan_contract`.

## Docs
- [API documentation (plain text)](https://contract-scan.dev/docs): endpoints, request/response fields, payment flow
- [Full product description for LLMs](https://contract-scan.dev/llms-full.txt)
- [FAQ](https://contract-scan.dev/#faq)

## Optional
- [Blog](https://contract-scan.dev/blog)
- [Source code (MIT)](https://github.com/contractscan-dev/contractscan)
- [AI-written Solidity scan experiment data, 2026-10](https://github.com/contractscan-dev/ai-solidity-experiment-2026-10)
- [X / Twitter](https://x.com/ContractScanDev)