How Archon structures smart-contract audit work.
Audit overview
Archon's audit workflow turns source input into a structured report. The report is designed for builders: it prioritizes actionable findings, makes assumptions visible, and keeps generated evidence close to each claim.
Pipeline
- Ingest source — repository, verified contract source, or selected files.
- Build context — contract graph, imports, external dependencies, roles, and protocol surface.
- Run checks — static patterns, Mantle-specific checks, and model-assisted review.
- Generate report — findings, severity, exploit path, remediation, and confidence.
- Attach evidence — generated tests, proof hashes, gas reports, and links where available.
Output shape
A useful Archon finding includes:
- title,
- severity,
- affected file and function,
- condition required to trigger,
- impact,
- concrete fix,
- optional generated test or reproduction,
- notes on uncertainty.
Non-goals
Archon does not guarantee the absence of vulnerabilities. It is a review and evidence system, not a certification authority. High-value launches still need human review, contest coverage, and production monitoring.



