Nexus.Gateway
Autonomous legal-code engine for Web3. Generates verified structured data, audited Solidity smart contracts, and bilingual (EN/ID) legal contracts — mapped via Digital Twin v3.1.
Services
Structured Data
Verified JSON schemas for Web3, regulatory compliance, and cross-platform orchestration.
EVM Sentinel — M2M Quick Scan
Security-checked Solidity smart contracts — ERC-20, ERC-721, Escrow logic. 9 breach scenarios + quantitative Gas Asymmetry ratio.
Legal-Code Hybrid
Bilingual (EN/ID) legal contracts mapped directly to code functions via Digital Twin v3.1. Standard is the default tier. Early-Adopter / Promo Rates.
Pull Payment
USDC top-up on Polygon via EIP-712 Permit. Auto-converts to CRED. No charge.
EVM Sentinel — M2M Security Scan API
Quick Scan
Static security scan for machine agents: risk_score, breach_scenarios, gas_ratio, action: ALLOW|BLOCK + honeypot indicators. 1-hour result cache. Read-only static scan — no wallet approval required.
Deep Scan
Everything in Quick + BS-010 Permit2 wallet-drainer detection + BS-011 arbitrage-execution manipulation analysis with per-scenario detail.
# M2M scan — x402 payment in USDC on Polygon PoS
curl -X POST https://xibzsthfrbomefnvbicb.supabase.co/functions/v1/hello-world/evm-sentinel/v1/scan-quick \
-H "Content-Type: application/json" \
-H "x-client-id: your-agent-id" \
-d '{ "solidity_code": "..." }'
# → { "risk_score": 1, "action": "BLOCK", "breach_scenarios": [...] }
EVM Sentinel — Security Audit Tiers
M2M Quick Scan
Machine-to-machine Solidity audit: 9 breach scenarios (BS-001 – BS-009), Gas Asymmetry DoS detection (compute-to-gas ratio, threshold > 12.5), Digital Twin bipolar mapping. Endpoint: POST /gateway/dry-run.
H2M Security Audit
Human-sourced security audits via [SECURITY-INQUIRY] email ingestion. Standard: 24–72h SLA, single contract audit. Emergency: <24h SLA incl. remediation support. Retainer: ongoing monitoring + quarterly reviews. Early-Adopter / Promo Baseline Rates.
⚡ Historic Proof — The Engine Caught History's Most Expensive Bugs
Six infamous smart contract disasters, run through the production engine live (2026-10-05, v5.7.2-frontier). All breach scenarios fired correctly — median latency 12.5 ms.
The DAO (2016) — $60M lost
🔴 CRITICAL in 44 ms — reentrancy (BS-006) + privilege takeover (BS-013) on payOut, refund, executeProposal. The hack that forked Ethereum.
Unprotected — Parity class
🔴 CRITICAL in 8 ms — unprotected owner function (BS-013), the bug class that froze $280M.
The Run — ~$800K
🔴 CRITICAL in 13 ms — bad randomness (BS-012): block-entropy in payout logic, caught through the private-helper call chain.
SpankChain (2018) — $40K
🟠 HIGH in 43 ms — reentrancy (BS-006) + replay/nonce defense (BS-007) on createChannel/deposit.
King of the Ether Throne
🟠 HIGH in 12 ms — reentrancy (BS-006) + payout DoS (BS-009) on claimThrone.
Rubixi (2016)
🟡 MEDIUM in 12 ms — unbounded iteration DoS (BS-009) on addPayout.
Full writeup: audits/HISTORIC_BUGS_TEASER.md · Benchmarked vs Slither: 8/8 historic ToB cases recalled vs 4/8, 0 false positives on clean OpenZeppelin.
🔄 Closed Loop — Our Own Advisory Became a Permanent Rule
GHSA-3g9w-x8qp-2qpq (Confetti phantom vote, CWE-284, High) — reported by us, fixed by the maintainer in 5 hours. Today it is BS-014, a permanent detection rule in the engine (v5.14.x), regression-tested forever against the original vulnerable Governor.sol (negative control NC16). Manual audit → responsible disclosure → machine-checkable rule. Verification trace →
Quick Start — Try It Free
# 1. Discover — see what we offer (free, no auth)
curl https://xibzsthfrbomefnvbicb.supabase.co/functions/v1/hello-world/manifest.json
# 2. Test your Solidity contract — free, 9 breach scenarios
curl -X POST https://xibzsthfrbomefnvbicb.supabase.co/functions/v1/hello-world/gateway/dry-run \
-H "Content-Type: application/json" \
-d '{"source_code": "pragma solidity ^0.8.20; contract Token { }"}'
# 3. View sample manifests (3 tiers)
curl https://xibzsthfrbomefnvbicb.supabase.co/functions/v1/hello-world/samples
Interactive Playground — Try It Now
Paste any Solidity smart contract below and get a free security audit — 9 breach scenarios, Gas Asymmetry ratio, risk assessment, and deployable check. No signup, no auth.
Endpoints
Breach Simulation — 9 Scenarios
BS-001 Unauthorized Minting
Can attacker mint without authorization?
BS-002 Transfer Violation
Can transfers bypass balance checks?
BS-003 Fund Drain
Can anyone withdraw without auth?
BS-004 Emergency Freeze
Does contract have pause mechanism?
BS-005 Ownership Renounce
Can ownership be renounced?
BS-006 Reentrancy Attack
Are external calls protected?
BS-007 Replay Attack
Is nonce-based replay protection present?
BS-008 Gas Asymmetry DoS
Quantitative compute-to-gas ratio — threshold > 12.5 flags validator-delay risk.
BS-009 Unbounded Iteration DoS
Attacker-growable arrays freezing withdrawals?