Solodit Threat Intelligence & Vulnerability Research Platform

Solodit is Cyfrin's comprehensive security research platform that aggregates smart contract vulnerabilities, audit reports, and security intelligence from leading blockchain security firms, combined with CodeHawks competitive audit platform that provides proactive vulnerability disclosure and bug bounty capabilities.

Solodit Vulnerability Database

Comprehensive Security Dataset: Access to over 50,000 documented smart contract vulnerabilities from real audits, providing the most comprehensive security dataset in Web3 for proactive threat identification and monitoring.

Audit Report Aggregation: Centralized repository of audit reports from top security firms, making it easy to research similar protocols or vulnerability patterns and identify emerging threats.

Advanced Search and Filtering: Query vulnerabilities by severity level (Critical, High, Medium, Low), vulnerability type (reentrancy, access control, oracle manipulation), blockchain ecosystem, protocol category, audit firm, and time period.

Findings Explorer: Browse and analyze specific vulnerability findings with full markdown content, metadata, code snippets, and remediation details for threat intelligence gathering.

Audit History: Track security reviews for specific protocols over time, understanding how projects evolve security posture and identifying attack surface monitoring opportunities.

Solodit API: Free API access to the entire vulnerability database, enabling developers to build AI-powered security tools, train ML models, create threat feeds, or integrate security incident alerting into workflows.

Growing Dataset: Database continuously updated with new audits and vulnerabilities from across the ecosystem, providing real-time threat intelligence.

CodeHawks Bug Bounty & Vulnerability Disclosure

Competitive Vulnerability Discovery: Access to thousands of security researchers competing to find vulnerabilities through crowdsourced security reviews, providing proactive exploit detection before malicious actors.

Bug Bounty Programs: Public, private, and invite-only competitive audits with prize pools ranging from $3,000 to $500,000 USDC function as structured bug bounty platforms. Over $2 million in rewards distributed across 50+ completed competitive audits.

Vulnerability Disclosure Programs: Structured process for security researchers to responsibly disclose vulnerabilities with KYC-verified reward distribution.

Community Engagement: Discord community of 8,000+ smart contract security auditors fostering knowledge sharing, threat intelligence collaboration, and early warning on emerging attack vectors.

First Flights Training: Free educational audits allowing security researchers to practice skills on real codebases with AI-powered feedback, expanding the threat hunting capability of the ecosystem.

Threat Intelligence Use Cases

Security Researchers: Conducting comprehensive threat assessments benefit from researching similar protocol vulnerabilities and common attack vectors in the Solodit database.

Engineering Teams: Developers building AI-powered security tools can leverage the API to train models on real-world vulnerability data and create automated threat detection systems.

Protocol Developers: Teams building DeFi protocols, NFT platforms, or infrastructure can learn from past exploits to avoid common pitfalls and understand evolving threat landscape.

Compliance and Risk Management: Organizations can track industry security trends, benchmark against similar protocols, and maintain awareness of emerging threats.

Continuous Monitoring: Combination of historical vulnerability data and active bug bounty programs provides comprehensive threat intelligence coverage.

Technology Coverage

• Solidity contracts (Foundry, Hardhat)
• Cairo contracts (Starknet)
• Rust-based contracts (Solana)
• Layer 1 and Layer 2 protocols
• DeFi primitives (DEXs, lending, derivatives)
• Cross-chain bridges and messaging
• NFT and gaming contracts
• Staking and tokenomics systems
• Oracle implementations