truent-cli 0.5.0

Truent: multi-chain smart contract security analyzer with static analysis, invariant checking, and vulnerability detection for Solana, EVM, and Move programs.
truent-cli-0.5.0 is not a library.

truent

Multi-chain smart contract invariant checker for EVM, Solana, Move, and Soroban.

Crates.io Downloads License: MIT

What is Truent?

Truent is a unified invariant checking framework for smart contracts. Define security properties once in Truent's DSL and verify them across EVM, Solana, Move, and Soroban contracts automatically.

Quick Start

Install

cargo install truent-cli

Verify installation:

truent doctor

Usage

Initialize project:

truent init

Run checks:

truent check ./contracts --chain evm

Generate report:

truent check ./contracts --format json --output report.json

Supported Chains

Chain Language Checks Status
EVM Solidity, Vyper 44 built-in detectors ✅ Stable
Solana Rust (Anchor, native) 11 built-in detectors ✅ Stable
Move Move (Aptos, Sui) 7 built-in detectors, real AST via a vendored Sui tree-sitter grammar ✅ Stable
Soroban Rust (Stellar) 9 built-in detectors ✅ Stable

Features

  • 71 smart contract vulnerability detectors, plus a chain-agnostic rule (unauthorized_privileged_mutation) shared across all four
  • Custom invariant DSL
  • JSON/HTML/text reports
  • CI/CD integration
  • Violation suppression
  • Cross-platform binaries
  • Production-ready security analysis

Documentation

Full documentation: github.com/geekstrancend/Truent

License

MIT