MythX shut down in March and nothing replaced it so I built something

MythX 在三月关闭，且至今无人替代，所以我自己做了一个

If you were using MythX before March 31st, you already know. ConsenSys quietly sunset the entire MythX suite. One day it was there, the next your CI pipeline was just… failing silently. 如果你在 3 月 31 日之前使用过 MythX，那你一定已经知道了。ConsenSys 低调地关停了整个 MythX 套件。前一天它还在运行，第二天你的 CI 流水线就……悄无声息地报错了。

They pointed people toward Diligence Fuzzing, which is a great property-testing tool but it’s not an audit tool. Writing fuzz harnesses isn’t the same as pasting a contract and getting a vulnerability report back. 他们建议用户转向 Diligence Fuzzing，这虽然是一个很棒的属性测试工具，但它并不是审计工具。编写模糊测试（fuzz）工具链与直接粘贴合约并获取漏洞报告完全是两码事。

I’ve been building in Web3 security tooling for a while, and I kept running into the same wall: traditional audits cost $10K–$150K and take weeks, open-source scanners like Slither are powerful but raw, and the affordable SaaS middle ground basically disappeared when MythX went dark. 我在 Web3 安全工具领域深耕已久，却总是撞上同一堵墙：传统的审计费用高达 1 万至 15 万美元且耗时数周；像 Slither 这样的开源扫描器虽然强大但过于原始；而当 MythX 下线后，价格亲民的 SaaS 中间方案也随之消失了。

So I spent several months building SmartContractAuditor.ai, an AI-powered audit tool that fills that gap. 因此，我花了几个月时间构建了 SmartContractAuditor.ai，这是一个旨在填补该市场空白的 AI 审计工具。

What it does: 它的功能包括：

• Paste your Solidity, Vyper, or Rust contract and get a categorized report in under 60 seconds. 粘贴你的 Solidity、Vyper 或 Rust 合约，在 60 秒内获得一份分类报告。
• Findings are split into Critical / High / Medium / Low severity. 漏洞发现按严重程度分为：严重 / 高 / 中 / 低。
• Each finding includes a plain-English explanation of why it’s dangerous and how to fix it (not just “SWC-107 detected” with a link to a spec). 每个漏洞都包含通俗易懂的解释，说明其危险性及修复方法（不仅仅是显示“检测到 SWC-107”并附带一个规范链接）。
• Fix verification: apply the fix, re-paste, confirm it’s gone. 修复验证：应用修复后重新粘贴，确认漏洞已消除。
• PDF report export for sharing with your team or investors. 支持导出 PDF 报告，方便与团队或投资者分享。

It catches the stuff that causes real losses: reentrancy, access control issues, oracle manipulation patterns, flash loan attack surfaces, tx.origin misuse, signature replay, unchecked external calls. 它能捕捉导致实际损失的问题：重入攻击、访问控制问题、预言机操纵模式、闪电贷攻击面、tx.origin 误用、签名重放、未检查的外部调用等。

It’s free to try 3 scans, no signup required. Just go to the site and paste a contract. 你可以免费试用 3 次扫描，无需注册。只需访问网站并粘贴合约即可。

I’m not posting this as a finished, polished product launch. I’m posting because I want feedback from people who actually write smart contracts. Specifically: 我发布此文并非为了宣布一个完美的产品发布。我发布是因为我需要来自真正编写智能合约的人的反馈。具体来说：

• What does the output miss that Slither/Mythril would catch? 输出结果中遗漏了哪些 Slither/Mythril 能捕捉到的问题？
• Is the severity categorization reasonable, or is it over/under-flagging? 严重程度的分类是否合理？是否存在过度标记或标记不足的情况？
• What would make this actually fit into your dev workflow? 什么功能才能让它真正融入你的开发工作流？
• Is there a specific vulnerability class you’d want it to prioritize? 是否有你希望它优先处理的特定漏洞类别？

If you’ve been looking for something to replace MythX in your pipeline, give it a shot and tell me what you think either in the comments here or on the site itself. The tool is at smartcontractauditor.ai, no account needed for the first 3 scans. 如果你一直在寻找替代 MythX 的流水线工具，不妨试一试，并在评论区或网站上告诉我你的想法。工具地址：smartcontractauditor.ai，前 3 次扫描无需账户。