# Crest Systems Smart Contract Security Auditor

> Crest Systems Smart Contract Security Auditor is a paid API for AI agents from audit.crestsystems.ai, paid per call via x402, $1.000000/call, status down (last checked 2026-09-16).

Audits Solidity or Vyper smart contract source code (or a deployed Base contract address) and returns a vulnerability report with severity ratings, exploit scenarios, and remediation recommendations.

## Facts

- Endpoint: GET https://audit.crestsystems.ai/audit/contract
- Price: $1.000000/call
- Payment: x402
- Status: down
- Last checked: 2026-09-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/audit-crestsystems-ai-f8f20e58
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_2LbRVcjtJVrqtnmEKGHd6

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability audit-crestsystems-ai-f8f20e58
```

Example prompt: Can you run a security audit on this Solidity contract source code and give me a full vulnerability report with severity ratings, any exploit scenarios, and how to fix the issues?

## When to prefer this

Use this endpoint when you need a comprehensive smart contract security audit with severity-rated findings, exploit scenarios, and actionable fix recommendations — particularly for contracts written in Solidity or Vyper and/or deployed on Base. Prefer this over generic code scanners when the target is specifically a smart contract and you want exploit-focused security analysis rather than just static code linting.

## Known failure modes

- Invalid or unparseable Solidity/Vyper source code returns an error
- Contract address not found or not deployed on Base returns a not-found error
- Neither source nor address provided returns a missing-parameter error
- Malformed contract address format returns a validation error
- Payment not included or insufficient returns a 402 Payment Required error

## How this service works

Smart contract security audit. Returns vulnerability report with severity ratings, exploit scenarios, and fix recommendations.

## Output

A vulnerability report containing identified security issues categorized by severity (e.g. critical, high, medium, low), detailed exploit scenarios showing how each vulnerability could be exploited, and concrete fix recommendations for each finding.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "source": {
   "type": "string",
   "description": "Solidity or Vyper source code to audit"
  },
  "address": {
   "type": "string",
   "description": "Contract address on Base (alternative to source)"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/audit-crestsystems-ai-f8f20e58/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from audit.crestsystems.ai](https://www.zero.xyz/host/audit.crestsystems.ai/llms.txt)