Gabson0x/bountyforge
107 stars · Last commit 2026-05-26
All-round bug bounty skill for Claude Code parallelized agents for smart contract audits (EVM, Move, Solana, TRON), web/API security, and submission-ready reports for HackerOne, Bugcrowd, Intigriti & Immunefi.
README preview
# bountyforge > All-round bug bounty skill for Claude Code — parallelized agents for smart contract audits (EVM, Move, Solana, TRON), web/API security, local tooling orchestration, and submission-ready reports for HackerOne, Bugcrowd, Intigriti & Immunefi. --- ## What It Does Bounty Forge spins up **8 specialized security agents in parallel**, each attacking a different surface of your target. Findings are deduplicated, gate-evaluated, CVSS-scored, and formatted into a submission-ready report — in minutes. | Agent | Covers | |---|---| | Web / API | Auth bypass, IDOR, XSS, SSRF, SQLi, CSV injection, open redirect, path traversal, parameter pollution, GraphQL, CORS | | Smart Contract | EVM, Move/Aptos, Solana, TRON — structural & chain-specific bugs | | Access Control | Role bypass, init hijack, confused deputy, proxy admin | | Business Logic | State machine abuse, workflow skip, limit bypass, payment logic | | Crypto / Math | Overflow, precision loss, signature replay, EIP-712, nonce issues | | Race Conditions | Front-running, sandwich, TOCTOU, rotation window races | | Economic Security | Flash loans, oracle manipulation, inflation attacks, DeFi tokenomics |