Documentation

Learn how to use Hexific for smart contract security audits

Getting Started

What is Hexific?

Hexific is a free automated security audit platform for smart contracts. Upload your Solidity code and get instant analysis powered by Slither, plus AI-powered explanations to help you understand and fix vulnerabilities.

Why Use Hexific?

  • ✓Free Audits - Unlimited free Slither analysis
  • ✓AI Assistant - Get plain-English explanations of security issues
  • ✓Fast Results - Get your audit in under 5 minutes
  • ✓Private & Secure - Your code is deleted immediately after analysis
  • ✓Learn as You Build - Understand vulnerabilities and how to fix them

How to Use Hexific

Step 1: Prepare Your Contract

Package your Solidity project as a ZIP file.

For Foundry Projects:

cd your-project
zip -r my-contract.zip src/ foundry.toml lib/

Requirements:

  • â€ĸ Must be a ZIP file
  • â€ĸ Maximum 100MB
  • â€ĸ Must contain .sol files
  • â€ĸ For Foundry projects, include foundry.toml or src/ folder

Step 2: Upload Your Contract

  1. Visit hexific.com
  2. Click "Start Free Audit"
  3. Drag and drop your ZIP file (or click to browse)
  4. Click "Start Free Audit" button
  5. Wait 30 seconds to 5 minutes for results

🔒 What happens to your code?

Your files are analyzed on our secure servers and automatically deleted within minutes. We never store, share, or train AI models on your code.

Step 3: Review Your Results

After analysis completes, you'll see:

Summary Cards

Quick overview of findings by severity:

  • ●High - Critical security issues (fix immediately)
  • ●Medium - Important vulnerabilities (fix before deployment)
  • ●Low - Minor issues (good to address)
  • ●Informational - Code quality suggestions
  • ●Optimization - Gas-saving opportunities

AI Assistant

Free Questions

You get 3 free AI questions per audit. Click "Ask AI About Your Audit" to start.

Example Questions

  • →"Explain the high severity findings in simple terms"
  • →"How do I fix the reentrancy vulnerability?"
  • →"What's the risk level of these medium issues?"
  • →"Show me code examples to fix the access control problem"
  • →"Should I be worried about these gas optimizations?"

Paid Questions

After your 3 free questions:

  • â€ĸ$0.10 per question (currently on testnet - free during beta)
  • â€ĸConnect your wallet
  • â€ĸSign to verify payment
  • â€ĸGet instant AI response

💡 Tips for Better AI Responses:

  • â€ĸ Be specific - Ask about particular findings
  • â€ĸ One topic at a time - Don't mix multiple questions
  • â€ĸ Provide context - Mention your use case if relevant
  • â€ĸ Follow up - Use your queries to drill down

Understanding Security Findings

🔴 High Severity

What it means: Critical security vulnerabilities that could lead to loss of funds or contract compromise.

Examples: Reentrancy attacks, Access control issues, Integer overflow/underflow

âš ī¸ Action: Fix immediately before any deployment.

🟠 Medium Severity

What it means: Important security issues that could be exploited under certain conditions.

Examples: Unprotected functions, Missing input validation, Weak randomness

âš ī¸ Action: Fix before mainnet deployment.

🟡 Low Severity

What it means: Minor issues that could cause unexpected behavior but are harder to exploit.

Examples: Missing event emissions, Unused variables, Outdated compiler version

Action: Good practice to fix, but not critical.

đŸ”ĩ Informational

What it means: Code quality and best practice suggestions.

Examples: Naming conventions, Code organization, Documentation suggestions

Action: Optional improvements for better code quality.

đŸŸĸ Optimization

What it means: Opportunities to reduce gas costs.

Examples: Storage optimizations, Loop improvements, Function visibility

Action: Implement if gas costs are a concern.

Wallet Connection Guide

Why Connect a Wallet?

You only need to connect a wallet for paid AI queries (after using your 3 free questions).

Supported Wallets

  • ✓MetaMask
  • ✓Rainbow Wallet
  • ✓Coinbase Wallet
  • ✓WalletConnect (any compatible wallet)

How to Connect

  1. Click "Connect Wallet" when prompted
  2. Choose your wallet from the list
  3. Approve the connection in your wallet
  4. You're ready to make paid queries!

â„šī¸ Note:

Base mainnet with real USDC payments

Tips for Better Audits

Before Uploading

  1. Clean your code - Remove test files and node_modules from your ZIP
  2. Check file size - Keep under 100MB for faster processing
  3. Include dependencies - For Foundry projects, include necessary imports
  4. Update compiler - Use recent Solidity versions when possible

After Getting Results

  1. Start with high severity - Fix critical issues first
  2. Don't ignore informational - These can prevent future bugs
  3. Ask AI for clarification - Use your free questions wisely
  4. Test your fixes - Re-run the audit after making changes
  5. Document changes - Keep track of what you fixed and why

Ready to Audit Your Contract?

Get started with a free automated security audit in minutes

Start Free Audit →

Need Help?