{"id":"aderyn","name":"Aderyn","af_score":71.3,"security_score":80.0,"reliability_score":null,"what_it_does":"Aderyn is a Rust-based static analyzer built specifically for Solidity smart contracts, developed by Cyfrin (a leading smart contract security audit firm). It compiles and analyzes the AST of Solidity contracts to detect vulnerability patterns including reentrancy, unchecked return values, weak randomness, centralization risks, and dozens of other known vulnerability classes. Unlike general-purpose linters, Aderyn understands Solidity semantics deeply — including storage layout, function visibility, and call graph analysis. It supports Foundry and Hardhat project layouts with zero configuration, outputting reports in Markdown, JSON, or SARIF for CI/CD integration. The tool also exposes an MCP server interface (tagged in GitHub topics, though minimally documented) enabling AI agents to invoke contract analysis directly.","best_when":"An agent or CI/CD pipeline needs fast, automated detection of known Solidity vulnerability patterns before deployment or during code review, integrated with Foundry or Hardhat build systems.","avoid_when":"You are working with non-Solidity contracts, need dynamic/runtime analysis of deployed contracts, or require comprehensive audit coverage that only manual review can provide.","last_evaluated":"2026-03-01T09:50:05.177693+00:00"}