Contract Entry Point Analyst

Overview

The Contract Entry Point Analyst is a specialized tool designed to be the foundational step in any smart contract security audit. Its primary function is to systematically analyze a codebase and generate a comprehensive map of every state-changing entry point. Missing an entry point can mean missing an entire attack vector, making this analysis critical for establishing complete audit coverage.

Capabilities

• External Function Enumeration: Identifies all functions callable from outside the contract boundary.
• State Mutation Mapping: Tracks precisely which storage variables are modified by each identified function.
• Access Control Classification: Categorizes entry points based on their required access level (e.g., public, restricted, admin-only).
• Cross-Contract Interaction Tracing: Maps out any entry points that initiate calls to other external contracts.
• Privileged Function Identification: Specifically flags upgrade mechanisms and administrative functions for prioritized review.

Example Use Cases

1. Initial Audit Kickoff: Run this agent at the very beginning of an audit to generate the initial, comprehensive attack surface map that guides all subsequent testing efforts.
2. Coverage Verification: When the audit team suspects gaps in coverage, use this agent to re-verify that every externally callable function has been accounted for and analyzed.
3. Risk Prioritization: Generate a structured report that allows security leads to prioritize review targets based on the combination of high privilege level and significant state impact.