Dev.to
7/13/2026

The original title is "I open-sourced a Solidity security scanner with 0 false positives on all of OpenZeppelin"
Original: I open-sourced a Solidity security scanner with 0 false positives on all of OpenZeppelin
Short summary
A developer open-sourced OpenClaw, a Solidity security scanner achieving zero false positives across the entire OpenZeppelin library. It ships 12 heuristic detectors targeting real exploit patterns like ERC-4626 rounding attacks, oracle staleness, and reentrancy. The tool runs as a CLI or GitHub Action and generates Markdown/HTML reports, positioning itself as a fast first-pass CI safety net rather than a replacement for human audits.
- •OpenClaw is an open-source Solidity scanner with 0 false positives on OpenZeppelin
- •12 heuristic detectors target real DeFi exploit patterns (ERC-4626, reentrancy, oracle staleness)
- •Runs as CLI or GitHub Action; generates professional reports in seconds
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



