evm-watchdog-scan.fly.dev · 4 listed services · provider site
Use this to be told when a contract you rely on (Base, Robinhood Chain) gets new code, a new owner or weaker upgrade rules, or when a new advisory hits your npm lockfile: 30 days of hourly checks, signed webhook on each...
Use this before approving or depositing into a contract on Base or Robinhood Chain: is it a proxy, who can change its code (single key, Safe with threshold, timelock with delay), who owns it, is the live code verified on...
Use this before adding or upgrading an npm dependency (OpenZeppelin, solmate, hardhat…), or to triage a lockfile: GitHub/OSV advisories affecting a whole package-lock.json or yarn.lock (or up to 100 listed packages) at t...
EVM Watchdog: npm/Foundry dependency advisories split by on-chain vs toolchain surface, plus known Solidity bug-class leads, for a public GitHub repo. A scan, not an audit.
Provider identity is derived from the domain or repository in the source record. If two vendors share a host, they appear together here — that is a limitation of the data, not a statement about ownership.