# Turboshop Solidity Security Audit Tool

> Turboshop Solidity Security Audit Tool is a paid API for AI agents from turboshop.ai, paid per call via x402, $0.08/call, status unknown (last checked 2026-10-19).

Performs static vulnerability analysis on Solidity smart contract source code, detecting reentrancy attacks, unchecked ERC-20 transfers, tx.origin auth flaws, and unindexed events.

## Facts

- Endpoint: GET https://turboshop.ai/api/v1/products/prod-solidity-security-audit-tool/buy?utm_source=zero.xyz
- Price: $0.08/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/turboshop-solidity-security-audit-tool-d5f889d0
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_AOALRQ28tqnWotoBaHfe-

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability turboshop-solidity-security-audit-tool-d5f889d0
```

Example prompt: Can you run a security audit on this Solidity contract code and flag any reentrancy vulnerabilities, unchecked ERC-20 transfers, tx.origin auth issues, or unindexed events? Here's the source: `pragma solidity ^0.8.0; contract MyToken { ... }`

## When to prefer this

Choose this endpoint when you need fast, automated static analysis of Solidity smart contract code specifically for the four vulnerability classes it targets (reentrancy, unchecked ERC-20 transfers, tx.origin auth, unindexed events). It is ideal for pre-deployment checks, CI/CD pipeline integration, or quick audits at low cost ($0.08/call). Prefer a full manual audit or more comprehensive tools (Slither, MythX) for production contracts requiring exhaustive coverage.

## Known failure modes

- Empty or invalid Solidity code returns an error or empty findings list
- Extremely large contracts may hit input size limits
- Parser may fail on non-standard Solidity syntax or very old compiler versions
- Network or payment errors return a 402 or 5xx response
- False negatives possible — static analysis may not catch all vulnerability patterns

## How this service works

Real working agent tool endpoint that executes static vulnerability analysis on Solidity smart contracts (detecting reentrancy vulnerabilities, unchecked ERC-20 transfers, tx.origin authentication flaws, and unindexed events).

## Output

Returns a structured vulnerability report identifying security issues found in the submitted Solidity code, including specific findings for reentrancy vulnerabilities, unchecked ERC-20 transfer results, tx.origin-based authentication flaws, and unindexed event declarations, along with their locations or descriptions within the contract.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "client_id": {
   "type": "string",
   "description": "Optional calling agent ID"
  },
  "contract_code": {
   "type": "string",
   "description": "Solidity source code snippet to audit for security vulnerabilities"
  },
  "contract_name": {
   "type": "string",
   "description": "Optional contract name identifier"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/turboshop-solidity-security-audit-tool-d5f889d0/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from turboshop.ai](https://www.zero.xyz/host/turboshop.ai/llms.txt)