Documentation
Learn how to use Hexific for smart contract security audits
Getting Started
Learn how to use Hexific
AI Assistant
Get help from AI
Security Guide
Understand findings
Getting Started
What is Hexific?
Hexific is a free automated security audit platform for smart contracts. Upload your Solidity code and get instant analysis powered by Slither, plus AI-powered explanations to help you understand and fix vulnerabilities.
Why Use Hexific?
- âFree Audits - Unlimited free Slither analysis
- âAI Assistant - Get plain-English explanations of security issues
- âFast Results - Get your audit in under 5 minutes
- âPrivate & Secure - Your code is deleted immediately after analysis
- âLearn as You Build - Understand vulnerabilities and how to fix them
How to Use Hexific
Step 1: Prepare Your Contract
Package your Solidity project as a ZIP file.
For Foundry Projects:
cd your-project
zip -r my-contract.zip src/ foundry.toml lib/Requirements:
- âĸ Must be a ZIP file
- âĸ Maximum 100MB
- âĸ Must contain .sol files
- âĸ For Foundry projects, include foundry.toml or src/ folder
Step 2: Upload Your Contract
- Visit hexific.com
- Click "Start Free Audit"
- Drag and drop your ZIP file (or click to browse)
- Click "Start Free Audit" button
- Wait 30 seconds to 5 minutes for results
đ What happens to your code?
Your files are analyzed on our secure servers and automatically deleted within minutes. We never store, share, or train AI models on your code.
Step 3: Review Your Results
After analysis completes, you'll see:
Summary Cards
Quick overview of findings by severity:
- âHigh - Critical security issues (fix immediately)
- âMedium - Important vulnerabilities (fix before deployment)
- âLow - Minor issues (good to address)
- âInformational - Code quality suggestions
- âOptimization - Gas-saving opportunities
AI Assistant
Free Questions
You get 3 free AI questions per audit. Click "Ask AI About Your Audit" to start.
Example Questions
- â"Explain the high severity findings in simple terms"
- â"How do I fix the reentrancy vulnerability?"
- â"What's the risk level of these medium issues?"
- â"Show me code examples to fix the access control problem"
- â"Should I be worried about these gas optimizations?"
Paid Questions
After your 3 free questions:
- âĸ$0.10 per question (currently on testnet - free during beta)
- âĸConnect your wallet
- âĸSign to verify payment
- âĸGet instant AI response
đĄ Tips for Better AI Responses:
- âĸ Be specific - Ask about particular findings
- âĸ One topic at a time - Don't mix multiple questions
- âĸ Provide context - Mention your use case if relevant
- âĸ Follow up - Use your queries to drill down
Understanding Security Findings
đ´ High Severity
What it means: Critical security vulnerabilities that could lead to loss of funds or contract compromise.
Examples: Reentrancy attacks, Access control issues, Integer overflow/underflow
â ī¸ Action: Fix immediately before any deployment.
đ Medium Severity
What it means: Important security issues that could be exploited under certain conditions.
Examples: Unprotected functions, Missing input validation, Weak randomness
â ī¸ Action: Fix before mainnet deployment.
đĄ Low Severity
What it means: Minor issues that could cause unexpected behavior but are harder to exploit.
Examples: Missing event emissions, Unused variables, Outdated compiler version
Action: Good practice to fix, but not critical.
đĩ Informational
What it means: Code quality and best practice suggestions.
Examples: Naming conventions, Code organization, Documentation suggestions
Action: Optional improvements for better code quality.
đĸ Optimization
What it means: Opportunities to reduce gas costs.
Examples: Storage optimizations, Loop improvements, Function visibility
Action: Implement if gas costs are a concern.
Wallet Connection Guide
Why Connect a Wallet?
You only need to connect a wallet for paid AI queries (after using your 3 free questions).
Supported Wallets
- âMetaMask
- âRainbow Wallet
- âCoinbase Wallet
- âWalletConnect (any compatible wallet)
How to Connect
- Click "Connect Wallet" when prompted
- Choose your wallet from the list
- Approve the connection in your wallet
- You're ready to make paid queries!
âšī¸ Note:
Base mainnet with real USDC payments
Tips for Better Audits
Before Uploading
- Clean your code - Remove test files and node_modules from your ZIP
- Check file size - Keep under 100MB for faster processing
- Include dependencies - For Foundry projects, include necessary imports
- Update compiler - Use recent Solidity versions when possible
After Getting Results
- Start with high severity - Fix critical issues first
- Don't ignore informational - These can prevent future bugs
- Ask AI for clarification - Use your free questions wisely
- Test your fixes - Re-run the audit after making changes
- Document changes - Keep track of what you fixed and why
Ready to Audit Your Contract?
Get started with a free automated security audit in minutes
Start Free Audit â