# Cottonmouth Smart Contract Security Auditor

> Cottonmouth Smart Contract Security Auditor is a paid API for AI agents from cottonmouth.lonestaroracle.xyz, paid per call via x402, $2/call, status unknown (last checked 2026-09-13).

Autonomously audits Rust-based smart contracts (CosmWasm, Anchor, Stellar, NEAR) for security vulnerabilities

## Facts

- Endpoint: POST https://cottonmouth.lonestaroracle.xyz/audit
- Price: $2/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cottonmouth-smart-contract-security-auditor-fea74600
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ti9fodi5MgKvfSkONRJij

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cottonmouth-smart-contract-security-auditor-fea74600 -d '<json body>'
```

Example prompt: Can you run a security audit on my CosmWasm Rust smart contract and flag any critical vulnerabilities, reentrancy risks, or integer overflow issues before I deploy it to mainnet?

## When to prefer this

Choose this endpoint when you need automated security auditing specifically for Rust-based smart contracts on CosmWasm, Anchor, Stellar, or NEAR blockchains. Prefer this over generic code review tools when the target is blockchain/Web3 contract security and you need vulnerability classifications specific to smart contract attack patterns (reentrancy, integer overflow, access control flaws).

## Known failure modes

- Invalid or unparseable Rust source code returns a parse error
- Unsupported contract platform returns an unsupported target error
- Malformed request body returns 400 Bad Request
- Payment failure or insufficient USDC returns 402 Payment Required
- Contract too large or complex may timeout or return partial results
- Network or service downtime returns 503 Service Unavailable

## How this service works

Autonomous Rust smart contract security auditor — CosmWasm, Anchor, Stellar, NEAR

## Output

A structured security audit report detailing identified vulnerabilities, their severity levels (critical/high/medium/low), affected code locations, and recommended remediations for the submitted Rust smart contract.

## Request schema (JSON Schema)

```json
{
 "name": "CottonmouthAI — Rust Smart Contract Audit",
 "tags": [
  "smart-contract",
  "rust",
  "cosmwasm",
  "solana",
  "security",
  "audit"
 ],
 "type": "object",
 "version": "1.0.0",
 "category": "security",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "type": "object",
     "title": "AuditRequest",
     "properties": {
      "source": {
       "anyOf": [
        {
         "type": "string"
        },
        {
         "type": "null"
        }
       ],
       "title": "Source"
      },
      "framework": {
       "anyOf": [
        {
         "type": "string"
        },
        {
         "type": "null"
        }
       ],
       "title": "Framework",
       "default": ""
      },
      "github_url": {
       "anyOf": [
        {
         "type": "string"
        },
        {
         "type": "null"
        }
       ],
       "title": "Github Url"
      },
      "contract_name": {
       "anyOf": [
        {
         "type": "string"
        },
        {
         "type": "null"
        }
       ],
       "title": "Contract Name",
       "default": "Contract"
      }
     }
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST",
      "PUT",
      "PATCH"
     ],
     "type": "string"
    },
    "bodyType": {
     "type": "string",
     "const": "json"
    }
   }
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {}
   }
  }
 },
 "description": "Autonomous Rust smart contract security audit for CosmWasm, Anchor/Solana, Stellar/Soroban, and NEAR. Two-pass verification removes False positives."
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cottonmouth-smart-contract-security-auditor-fea74600/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cottonmouth.lonestaroracle.xyz](https://www.zero.xyz/host/cottonmouth.lonestaroracle.xyz/llms.txt)