The request names TokenOS, whose page describes an AI app builder for Web3 apps, token launches and contract deployment, and lists an MCP server named TokenOS Smart Contract Audit 1. Because the request names the product, TokenOS comes first, followed by established and specialised smart contract auditing alternatives: Trail of Bits offers audits and a TON vulnerability scanner 2, Grisoco AI offers EVM and DAML contract audits 3, and Weakspot audits Solidity and Rust/Anchor contracts 4.
- 1
TokenOStokenos.aiwebsite read, tools not yet checked
AI operating system for Web3 that generates Solana and EVM apps, deploys contracts and launches tokens 1, with an MCP server named TokenOS Smart Contract Audit among its official doors 1.
official:MCP server · TokenOS Smart Contract AuditMCP server · TokenOS dApp BuilderMCP server · TokenOS Gas & Fee TrackerMCP server · TokenOS Token Launch PlannerMCP server · TokenOS Tokenomics Designer
- 2
Trail of Bitstrailofbits.comverified and signed
Security firm whose entry-point-analyzer maps state-changing entry points in smart contracts for security auditing 12, and whose ton-vulnerability-scanner checks TON contracts for three critical vulnerabilities 12.
for agents: entry-point-analyzer · ton-vulnerability-scanner · guidelines-advisor
- 3
Grisoco AIgrisoco.comwebsite read, tools not yet checked
Smart-contract audits for EVM chains and DAML, and a check of every AI agent crypto payment before it signs: right token, exact amount, right recipient, nothing 3
- 4
Weakspotweakspot.devwebsite read, tools not yet checked
Audits Solidity and Rust/Anchor smart contracts for reentrancy, access-control and arithmetic bugs, re-checking each finding against the code 4.
official:MCP server · dev.weakspot/weakspot
Sources
- 1TokenOS — AI Operating System for the Web3 Economytokenos.ai · read 2026-10-29
- 2Trail of Bits: Security Research, Audits, and Toolstrailofbits.com · read 2026-10-29
- 3Grisoco AI — Smart-contract audits and AI agent payment checksgrisoco.com · read 2026-10-29
- 4Weakspot AI smart contract security audits for Solidity and Rustweakspot.dev · read 2026-10-29
- 12entry-point-analyzer: declares "entry-point-analyzer" (the record we read and signed)unfragile.ai · read 2026-10-24
For agents: the 10 actions behind this answer
· TokenOS website read, tools not yet checked
Describe a dApp and TokenOS builds it: GPT-6, Claude 5 and Gemini agents generate full-stack Solana and EVM apps with live preview, one-click contract deployment, token launches on Pump.fun and Robinhood Chain, a peer-to-peer AI inference market and the DeAI GPU compute network.
entry-point-analyzer · entry-point-analyzer verified and signed
Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports. Excludes view/pure/read-
· Grisoco AI website read, tools not yet checked
Smart-contract audits for EVM chains and DAML, and a check of every AI agent crypto payment before it signs: right token, exact amount, right recipient, nothing else.
· Weakspot website read, tools not yet checked
Weakspot audits Solidity and Rust/Anchor smart contracts for reentrancy, access-control, and arithmetic bugs. Every finding is re-checked against your actual code, so you get a short report of real issues not a wall of false positives. From $1.
Token Security Audit · ChainAware Prediction Agent verified and signed
Full contract audit — honeypot detection, ownership, liquidity, supply, transfer integrity. Returns cached result immediately if available, otherwise schedules and polls until complete.
· Sigma Prime website read, tools not yet checked
Auditing complex offchain code, ZK systems, blockchain infrastructure, and smart contracts from the team behind Lighthouse.
run_checks · AWS SRA Verify MCP Server found in code, not yet checked
Run every check for a service and/or account type in one scan.
get_contract_info · smarts.md verified and signed
Get metadata about a verified smart contract: name, compiler, classification, supported adapters, and counts of functions and events. Accepts either a curated slug (uni-eth, usdc-base, …) or chain+address.
· Tanod Security website read, tools not yet checked
Scan Solidity source or a verified contract on Ethereum or Base for common DeFi bug classes with one POST. Fixed JSON report, price and limits.
· Acrity website read, tools not yet checked
AI adversarial code review with multi-agent consensus, operational telemetry, and an auditable trail for engineering teams.
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.