MetaTrust MetaScan

MetaScan is a security scanning platform for smart contract code developed by MetaTrust. It analyzes Solidity smart contracts to identify vulnerabilities and provides remediation recommendations. The platform uses multiple analysis engines: - Security Analyzer: static code analysis combined with GPT-generated prompts to simulate attack scenarios and identify logical vulnerabilities - GPTScan: combines GPT-based code understanding with static analysis to detect logic vulnerabilities in smart contracts, including variants where vulnerability names and code flow have changed - Code Quality: identifies informational and low-level vulnerabilities - Security Prover: a formal verification engine using symbolic execution to mathematically verify contract execution logic and reduce false positives, supporting Solidity-like specification syntax for pre/post-conditions, invariants, and rule-based properties - Code Clone: detects code clones and duplication to identify risks such as migration attacks - Open Source Analyzer: assesses security of open-source library usage within smart contracts An AI Assistant is integrated into the project detail and scan result pages to answer questions about detected vulnerabilities and suggest remediation. MetaScan accepts source code from public/private Git repositories (GitHub, GitLab) or zip archive uploads, and exposes RESTful APIs to create projects, initiate scans, and retrieve results for integration into CI/CD pipelines. It also integrates with the Remix IDE via a plugin to trigger scans and highlight problematic code directly in the editor. The tool generates audit reports summarizing and classifying detected security vulnerabilities.