Autonomous Web3 security auditor for smart contracts and L1 node infrastructure. It targets engineers and researchers, delivering detailed audit reports with verified PoC exploits across diverse blockchain ecosystems and languages.

How It Works

This project orchestrates 18-100 AI agents across 8 phases, utilizing Claude Code or OpenAI Codex CLI. It supports EVM/Solidity, Solana/Anchor, Aptos Move, Sui Move, Soroban/Stellar, DAML/Canton, and L1 Go/Rust node clients. Its novelty lies in its autonomous, multi-agent, multi-phase approach, enhanced by PTY-supervised execution and disk-derived completion for resilience and resumability.

Quick Start & Requirements

Install via git clone --recurse-submodules then python3 plamen.py install (Linux/macOS) or python plamen.py install (Windows). Prerequisites: Claude Code CLI or OpenAI Codex CLI, Python 3.11-3.12, Node.js 18+, Git. macOS requires xcode-select --install; Windows needs Developer Mode. Per-language tools are installed via plamen setup. RAG database build needs ~6GB RAM and a Solodit API key.

Highlighted Details

• Broad multi-chain support: EVM/Solidity, Solana/Anchor, Aptos Move, Sui Move, Soroban/Stellar, DAML/Canton.
• Audits L1 node-client infrastructure (Go/Rust) for consensus, P2P, etc.
• PTY-supervised execution and disk-derived completion ensure resilient, resumable audits that degrade gracefully.
• Codex CLI backend (BETA) offers a cost-saving alternative to Claude Code.
• Generates detailed Markdown audit reports with severity-tiered findings and verified PoCs.

Maintenance & Community

No explicit community channels are listed, but the project acknowledges integrations from Trail of Bits, Farofino, Solodit, Immunefi, Anthropic, and OpenAI.

Licensing & Compatibility

Released under the permissive MIT license, allowing broad use, modification, and distribution, including for commercial purposes.

Limitations & Caveats

The Codex CLI backend is in BETA. Installation requires either Claude Code CLI or OpenAI Codex CLI. RAG database build requires API keys (e.g., Solodit). Windows users must enable Developer Mode. git clone --recurse-submodules is mandatory; ZIP downloads omit critical components.