Search Solodit Findings
search_findingsSearch 49,000+ blockchain security audit findings using 14+ filters. Combine keywords, severity, firms, tags, date ranges, and more to find relevant vulnerabilities.
Instructions
Search Solodit's database of 49,000+ blockchain security audit findings with full filter power. Returns structured results with title, impact, summary, tags, firm, scores, and content preview. All parameters are optional -- a bare call returns recent findings.
This is the most powerful search tool with 14+ filters. For simpler queries, consider:
get_finding_detail: Get full content of a specific finding by ID or slug
search_by_tag: Quick vulnerability pattern lookup by tag (sorted by quality)
recent_findings: Browse latest discoveries from the last N days
When to use: You need complex multi-filter queries combining keywords, firms, date ranges, and other advanced filters that the convenience tools don't support.
Available filters:
keywords: Free-text search across titles and content
impact: Severity (HIGH, MEDIUM, LOW, GAS)
tags: Vulnerability type — top tags: Business Logic, Validation, Wrong Math, Front-Running, DOS, Fee On Transfer, Oracle, Reentrancy, Access Control, Decimals, Liquidation, Overflow/Underflow, Slippage, Missing-Logic, Rounding, Stale Price, ERC4626, First Depositor Issue, Chainlink, Flash Loan, Weird ERC20, ERC20, Missing Check, Fund Lock, Uniswap, Vote, ERC721, NFT, Sandwich Attack, Lending Pool, Precision Loss, Replay Attack, Share Inflation, Read-only Reentrancy, and 170+ more
firms: Audit firm — all 30: Code4rena, Zokyo, OpenZeppelin, Pashov Audit Group, Cantina, Sherlock, Halborn, Quantstamp, MixBytes, OtterSec, Spearbit, TrailOfBits, Cyfrin, ConsenSys, Codehawks, SigmaPrime, Shieldify, Immunefi, Trust Security, Hexens, ZachObront, Guardian Audits, AuditOne, Recon Audits, 0x52, Oxorio, Kann, ThreeSigma, Hans, Naman
protocol_category: All 32: Dexes, CDP, Services, Cross Chain, Yield, Liquid Staking, Synthetics, Staking Pool, Yield Aggregator, Payments, Bridge, Launchpad, RWA, Leveraged Farming, Indexes, Liquidity manager, Options Vault, Oracle, Derivatives, Lending, Privacy, Insurance, NFT Marketplace, NFT Lending, Algo-Stables, RWA Lending, Gaming, Prediction Market, Farm, Decentralized Stablecoin, Reserve Currency, Uncollateralized Lending
language: All 17: Solidity, Rust, Go, Move, TypeScript, Vyper, FunC, JavaScript, Cairo, Dart, Python, Circom, Cosmos, Sway, Yul, Noir, Tact
protocol: Protocol name (partial match)
finder: Auditor handle (partial match)
quality_min / rarity_min: Minimum score thresholds (0-5)
date_range: Preset ranges (30, 60, 90 days, or alltime)
date_after: Custom date cutoff (ISO format)
sort_by / sort_direction: Ordering (Recency/Quality/Rarity, Desc/Asc)
page / page_size: Pagination controls
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number (default: 1) | |
| tags | No | Filter by vulnerability tags. Available tags (use exact casing): Business Logic, Validation, Wrong Math, Front-Running, DOS, Fee On Transfer, Oracle, Reentrancy, Access Control, Don't update state, Decimals, Liquidation, Overflow/Underflow, Admin, Denial-Of-Service, Slippage, Missing-Logic, Rounding, Stale Price, ERC4626, First Depositor Issue, Chainlink, Flash Loan, Weird ERC20, Configuration, ERC20, Missing Check, Fund Lock, Uniswap, Vote, ERC721, Coding-Bug, NFT, Sandwich Attack, Approve, Chain Reorganization Attack, Swap, Deposit/Reward tokens, ERC1155, Gas Limit, Lending Pool, Blacklisted, Allowance, Bypass limit, call vs transfer, Initialization, Auction, SafeTransfer, transferFrom vs safeTransferFrom, Type casting, Ownership, Precision Loss, Replay Attack, Grief Attack, Refund Ether, Share Inflation, ERC777, Code Quality, Pause, Upgradable, EIP-4626, Min/Max Cap Validation, Payable, Timing, TWAP, Vault, Cross Chain, Delegate, External Call, Initial Deposit, Bridge, Broken Loop, External Contract, LayerZero, Read-only Reentrancy, and 100+ more | |
| firms | No | Filter by audit firm. All available firms (use exact casing): Code4rena, Zokyo, OpenZeppelin, Pashov Audit Group, Cantina, Sherlock, Halborn, Quantstamp, MixBytes, OtterSec, Spearbit, TrailOfBits, Cyfrin, ConsenSys, Codehawks, SigmaPrime, Shieldify, Immunefi, Trust Security, Hexens, ZachObront, Guardian Audits, AuditOne, Recon Audits, 0x52, Oxorio, Kann, ThreeSigma, Hans, Naman | |
| finder | No | Filter by auditor/finder handle (partial match) | |
| impact | No | Filter by impact severity. Values: HIGH, MEDIUM, LOW, GAS | |
| sort_by | No | Sort results by field. Default: Recency | |
| keywords | No | Search keywords in finding titles and content. Example: 'reentrancy', 'oracle manipulation', 'flash loan' | |
| language | No | Filter by programming language. All available languages (use exact casing): Solidity, Rust, Go, Move, TypeScript, Vyper, FunC, JavaScript, Cairo, Dart, Python, Circom, Cosmos, Sway, Yul, Noir, Tact | |
| protocol | No | Filter by protocol name (partial match). Example: 'Aave', 'Uniswap' | |
| page_size | No | Results per page (default: 20, max: 100) | |
| date_after | No | Filter findings after this date (ISO format: 2024-01-01). Overrides date_range if both provided. | |
| date_range | No | Filter by date range: last 30/60/90 days or all time | |
| rarity_min | No | Minimum rarity score (0-5) | |
| quality_min | No | Minimum quality score (0-5) | |
| sort_direction | No | Sort direction. Default: Desc | |
| protocol_category | No | Filter by protocol category. All available categories (use exact casing): Dexes, CDP, Services, Cross Chain, Yield, Liquid Staking, Synthetics, Staking Pool, Yield Aggregator, Payments, Bridge, Launchpad, RWA, Leveraged Farming, Indexes, Liquidity manager, Options Vault, Oracle, Derivatives, Lending, Privacy, Insurance, NFT Marketplace, NFT Lending, Algo-Stables, RWA Lending, Gaming, Prediction Market, Farm, Decentralized Stablecoin, Reserve Currency, Uncollateralized Lending | |
| max_content_length | No | Max characters of content preview per finding (default: 500, max: 5000) |