Monad Open-Sources AI-Powered Smart Contract Auditing Tool

Monad has published the source code for Ultrafuzz, a smart contract auditing tool that coordinates hundreds of specialised AI agents to detect vulnerabilities at runtime. Version v0.1.0 is released under the MIT license after more than 20 test runs on projects within the Monad ecosystem, and it supports Solidity and Vyper along with new models, providers, monitoring tools and ready-to-use audit profiles.

Testing showed that a property-guided approach, which directly searches for known problematic patterns, found far more vulnerabilities per run than traditional fuzzing methods that rely on generated test cases. However, Monad found that stateful fuzzing (testing how a contract behaves across sequences of transactions, state changes and time) remained essential for catching certain classes of flaws that simpler methods miss. The final tool combines several of these techniques, including more than 20 distinct exploration strategies, in a single platform.

While Ultrafuzz is aimed at developers of blockchain smart contracts rather than typical small business systems, its release reflects a wider trend: AI agents are increasingly being used to both find and, potentially, exploit software vulnerabilities faster than manual review ever could.