fix(critical): Fix 7 runtime-crash bugs - paywall signature, Finding attributes, newlines, gas accumulation, quoting, Docker, init files

Author: Maxwell Voss

.dockerignore

@@ -0,0 +1,14 @@
+.git
+.gitignore
+__pycache__
+.pytest_cache
+*.pyc
+*.pyo
+*.egg-info
+.env
+docs/
+dashboard/node_modules/
+dashboard/.next/
+*.md
+!README.md
+LICENSE

Dockerfile

@@ -1,5 +1,9 @@
 FROM python:3.11-slim
 
+LABEL maintainer="Maxwell VOSS"
+LABEL description="AI-powered smart contract scanner for Ethereum, Base & Solana"
+LABEL version="3.2"
+
 # Install solc and system dependencies
 RUN apt-get update && apt-get install -y \
     software-properties-common \
@@ -11,7 +15,7 @@ RUN apt-get update && apt-get install -y \
 # Install python dependencies
 COPY requirements.txt /app/requirements.txt
 RUN pip install --no-cache-dir -r /app/requirements.txt
-RUN pip install --no-cache-dir web3 slither-analyzer solc-select
+RUN pip install --no-cache-dir slither-analyzer solc-select
 
 # Install common solc versions for Slither
 RUN solc-select install 0.8.20 && \
@@ -35,8 +39,7 @@ RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y && \
 COPY . /app
 WORKDIR /app
 
-# The entrypoint script
-COPY entrypoint.sh /entrypoint.sh
-RUN chmod +x /entrypoint.sh
+RUN chmod +x /app/entrypoint.sh
+
+ENTRYPOINT ["/app/entrypoint.sh"]
 
-ENTRYPOINT ["/entrypoint.sh"]

entrypoint.sh

@@ -1,15 +1,16 @@
 #!/bin/bash
 set -e
 
-CONTRACT_ADDRESS=$1
-WALLET_ADDRESS=$2
-RPC_URL=$3
-GITHUB_TOKEN=$4
-ENTERPRISE_KEY=$5
+CONTRACT_ADDRESS="$1"
+WALLET_ADDRESS="$2"
+RPC_URL="$3"
+GITHUB_TOKEN="$4"
+ENTERPRISE_KEY="$5"
 
 echo "=========================================================="
-echo "🛡️ Starting Automated Smart Contract Auditor Pro"
+echo "⚡ Solidity Security Scanner PRO v3.2"
 echo "=========================================================="
+echo "Engine: Slither + Foundry Fuzz + Solana/Rust + AI Validator"
 
 export WALLET_ADDRESS
 export RPC_URL
@@ -18,8 +19,8 @@ export ENTERPRISE_KEY
 
 if [ -z "$CONTRACT_ADDRESS" ]; then
     echo "Scanning entire repository workspace..."
-    python /app/security_scanner.py --workspace ${GITHUB_WORKSPACE}
+    python /app/security_scanner.py --workspace "${GITHUB_WORKSPACE}"
 else
     echo "Scanning specific contract: $CONTRACT_ADDRESS"
-    python /app/security_scanner.py --address $CONTRACT_ADDRESS
+    python /app/security_scanner.py --address "$CONTRACT_ADDRESS"
 fi

gas_optimizer.py

@@ -9,6 +9,7 @@ def __init__(self, workspace: str):
 
     def optimize_contract(self, contract_path: str) -> Dict[str, Any]:
         """Runs heuristic analysis to find gas optimization opportunities."""
+        self.gas_findings = []  # Reset findings for each contract
         if not os.path.exists(contract_path):
             return {"status": "error", "message": "File not found"}
 

paywall/__init__.py

@@ -0,0 +1 @@
+# Paywall module for Web3 subscription verification

paywall/verify_subscription.py

@@ -29,7 +29,7 @@
     }
 }
 
-def verify_subscription(user_wallet: str) -> bool:
+def verify_subscription(user_wallet: str, rpc_url: str = "https://mainnet.base.org") -> bool:
     """
     Verifies if `user_wallet` has sent at least `REQUIRED_AMOUNT` of USDC
     to `OWNER_WALLET` within the last 30 days on either Ethereum or Base.

security_scanner.py

@@ -645,7 +645,7 @@ def scan_contract(contract_address: str, workspace_override: str = None) -> None
         if solana_scanner.is_solana:
             _log("INFO", "Solana/Rust project detected! Routing to Solana Scanner engine...")
             sol_res = solana_scanner.scan()
-            sys.stdout.write(json.dumps(sol_res) + "\\n")
+            sys.stdout.write(json.dumps(sol_res) + "\n")
             sys.stdout.flush()
             return
     except Exception as e:
@@ -878,29 +878,33 @@ def scan_contract(contract_address: str, workspace_override: str = None) -> None
 
         # Heuristic findings
         for finding in heuristic_findings:
-            if finding.severity in ["Critical", "High"] and finding.line_number > 0 and posted_comments < 15:
-                body = f"**[{finding.severity}] {finding.title}**\\n{finding.description}"
-                commenter.post_inline_comment(finding.file_path, finding.line_number, body)
+            sev_str = finding.severity.value if hasattr(finding.severity, 'value') else str(finding.severity)
+            if sev_str in ["Critical", "High"] and finding.line_number > 0 and posted_comments < 15:
+                body = f"**[{sev_str}] {finding.name}**\n{finding.description}"
+                commenter.post_inline_comment(finding.filepath, finding.line_number, body)
                 posted_comments += 1
 
         # Slither findings
         for sf in slither_raw:
-            if sf.mapped_severity in ["Critical", "High"] and sf.lines and posted_comments < 15:
-                # Use the first line of the first element
-                line_no = sf.lines[0]
+            sev = getattr(sf, 'mapped_severity', getattr(sf, 'severity', 'Low'))
+            lines = getattr(sf, 'lines', [])
+            if sev in ["Critical", "High"] and lines and posted_comments < 15:
+                line_no = lines[0]
                 if line_no > 0:
-                    body = f"**[{sf.mapped_severity}] {sf.check_name}**\\n{sf.description}"
-                    # Slither file path is usually relative
-                    commenter.post_inline_comment(sf.file_path, line_no, body)
+                    check = getattr(sf, 'check_name', getattr(sf, 'check', 'Unknown'))
+                    desc = getattr(sf, 'description', '')
+                    fpath = getattr(sf, 'file_path', getattr(sf, 'filename', ''))
+                    body = f"**[{sev}] {check}**\n{desc}"
+                    commenter.post_inline_comment(fpath, line_no, body)
                     posted_comments += 1
 
         # General summary comment
         if total_findings > 0:
-            summary_body = f"The Web3 AI Scanner found **{total_findings}** issues.\\n"
-            summary_body += f"- Critical: {merged_counts.get('Critical', 0)}\\n"
-            summary_body += f"- High: {merged_counts.get('High', 0)}\\n"
+            summary_body = f"The Web3 AI Scanner found **{total_findings}** issues.\n"
+            summary_body += f"- Critical: {merged_counts.get('Critical', 0)}\n"
+            summary_body += f"- High: {merged_counts.get('High', 0)}\n"
             if not has_pro:
-                summary_body += "\\n🔒 **Unlock AI False-Positive Suppression & Gas Optimizer** by sending 50 USDC to `0x9758AdAe878bD4EA0d0aa24408c56D7d4aEC29a5`."
+                summary_body += "\n🔒 **Unlock AI False-Positive Suppression & Gas Optimizer** by sending 50 USDC to `0x9758AdAe878bD4EA0d0aa24408c56D7d4aEC29a5`."
             commenter.post_general_comment(summary_body)
 
     except Exception as e:

tests/__init__.py

@@ -0,0 +1 @@
+# Tests package