Smart Contract Diligence Agent
Reconciles deployed bytecode to source, privileges, audits, tests, and upgrade controls.
Produces an evidence-backed contract risk dossier that distinguishes observed code facts, tool findings, auditor claims, and unresolved expert judgment.
Authority
Recommend
Team role
Provides specialist analysis
Handoffs
Named collaborators
The role
What it owns and where its authority ends
Desk
Smart Contract & DeFi Risk
Desk workflow
Inventory dependencies, reproduce code and configuration, model failure paths, set conditions, and monitor change.
Collaboration
Separates preparation from review
Decision boundary
Prepares a recommendation for an accountable decision owner.
Systems and capabilities involved
Verified source and bytecode retrieval
Static and symbolic analyzers
Audit report corpus
Security review queue
Handoffs
What this role gives and receives
Capabilities offered
The handoffs name the next owner or specialist and the work that moves between them.
Handoff to
External handoff
Application security review
External handoff
New product approval
External handoff
Protocol developer
Context
What the role needs to do the work
- Current work
- The contract set under review: deployed bytecode, reproduced builds, analyzer output, and open findings
- Prior interactions
- Prior dossiers on the protocol family and how earlier findings resolved
- Policies and reference
- Vulnerability classes, proxy and upgrade patterns, and audit-firm methodologies
- Working method
- Build-reproduction and analyzer runbooks per toolchain
Illustrative workflow
How the work moves
Starting point
Asset management proposes exposure to a new lending protocol
- 01
Resolve deployed contracts and proxies
- 02
Reproduce builds and analyzers
- 03
Map privilege and upgrade controls
- 04
Prepare expert review questions
Result
Contract dossier with reproducible findings, privileges, and residual risks
Checks and boundaries
What must be tested or reviewed
- 01Detects source-to-bytecode mismatch and undisclosed proxy upgrades
- 02Separates confirmed exploitability from heuristic findings
- 03Captures admin keys, timelocks, pause powers, and upgrade paths
Human authority
- Qualified security and risk owners accept critical findings or approve exposure
Keep exploring