Heuristic security scan of Solidity and Solana (Anchor / native Rust) contracts: reentrancy patterns, missing access control, tx.origin, delegatecall, weak randomness, unchecked calls, missing signer / owner / PDA bump checks, unchecked arithmetic and more — each with line numbers, severity and a fix, plus an overall letter grade. Read-only: the code you paste is analysed in memory and never stored.
Tools: • quick_audit — Static heuristic scan of a Solidity or Solana (Anchor / Rust) contract: findings with severity, line numbers and fixes, plus a letter grade.
Targets questions like: “audit my solidity contract”; “smart contract security checker”; “is this contract safe”; “solidity vulnerability scanner”; “anchor program audit”; “reentrancy check”.
Documentation: https://tokenos.ai/mcp/contract-audit
Outputs are informational — on-chain reads, deterministic calculators and heuristic scans — not financial, legal or security advice. TokenOS is non-custodial and never holds keys or funds; anything you launch, deploy or sign happens from your own wallet.
How to use
- 1Add it in ChatGPT
Open TokenOS Contract Audit in ChatGPT's Plugin directory (button above), select + to add it and sign in if asked.
- 2Use it in a chat
Type @ in the composer and pick TokenOS Contract Audit, or start your message with its name. ChatGPT may also suggest it when it fits what you ask.
Things to ask
- “Audit this Solidity contract for vulnerabilities — I'll paste the source”
- “Is this Anchor program safe? Here is the code”
- “Check my ERC-20 for reentrancy and access-control issues”
Disconnect
- 1Disconnect it in ChatGPT
Open Settings, then Apps or Plugins (the label depends on your rollout), select TokenOS Contract Audit and choose Disconnect. ChatGPT stops acting through your account; past conversations aren't deleted.