CyScout – Solidity Vulnerability Detection Powered by GitHub CodeQL

In plain words

CyScout extends GitHub's CodeQL semantic analysis engine to detect vulnerabilities in Solidity smart contracts. It allows developers to query code as data using an open-source framework, designed for those building and auditing blockchain applications. The tool is free for research and open-source projects, with flexible licensing available for other uses.

written from the facts on this page · September 2026

From the sources

This repository contains CoinFabrik's ongoing research and development to extend CodeQL support to the Solidity smart contract language. By leveraging the foundational work done by the CodeQL team for Ruby, we have adapted and expanded their approach to create a powerful toolset for analyzing Solidity code. - CoinFabrik/CyScout

In the maker’s words, at launch

Hi everyone, GitHub's CodeQL is a powerful semantic code analysis engine for identifying vulnerabilities across codebases. We've extended CodeQL to support Solidity, the most popular programming language for smart contracts. CodeQL enables you to query code as though it were data, and it's open-source (OSS). You can…

• 
  GritQL, a Rust CLI for rewriting source code2024 · github.com · ▲280

  Hi everyone! I’m excited to open source GritQL, a Rust CLI for searching and transforming source code. GritQL comes from my experiences with conducting large scale refactors and migrations. Usually, I would start exploring a codebase with grep. This is easy to start with, but most migrations end up accumulating additional requirements like ensuring the right packages are imported and excluding cases which don’t have a viable migration path. Eventually, to build a complex migration, I usually ended up having to write a full codemod program with a tool like jscodeshift. This comes with its own…

• 
  Opengrep2025 · opengrep.dev · ▲340

  The open source code security engine

• 
  ClangQL – Query C++ codebases using SQLite2021 · github.com · ▲73

  Query C++ codebases using SQLite. Contribute to frabert/ClangQL development by creating an account on GitHub.

• HN
  Hacker News Clone – Clojure, GraphQL Learning Project2019 · ▲179

  I have ported "The Fullstack Tutorial for GraphQL" series, https://www.howtographql.com/, from Javascript to Clojure/script. Blog post: https://promesante.github.io/2019/08/14/clojure_graphql_full... Source code GitHub repo: https://github.com/promesante/hn-clj-pedestal-re-frame Suggestions and corrections, more than welcome.

• 
  SolidityScan2023 · solidityscan.com · ▲195

  The ultimate EVM compatible smart contract analysis tool

• 
  An open-source financial ledger API written in Clojure2020 · github.com · ▲125

  Immutable, scalable, and easy to use ledger service. - hoophq/sequence

• 
  /dev/null▲481

  a social network for devs

  Dev tools · 2d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 22d ago · openbot.run

• 
  Talanoa▲341

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  buzzabout▲1,267

  Audience insights from 1B+ online discussions in 2 mins

  AI · 2024 · buzzabout.ai

• 
  bolt.new▲1,230

  Build and scale high-performing websites & apps using your words. Join millions and start building today.

  AI · 2024 · bolt.new

• 
  Feta▲1,217

  Run smarter stand-ups, build better products

  AI · 2024 · feta.io

• 
  Trag▲955

  AI code review companion

  AI · 2024 · usetrag.com

• 
  Softr for Notion▲923

  Turn Notion databases into portals & apps with no code

  Dev tools · 2024 · softr.io

• 
  General Collaboration▲910

  One inbox for all your work discussions

  Work · 2024 · generalcollaboration.com