2.9.26
Released 2 Nov 2026
Official Keylatch website
Smart Contract Audit Agent for Solidity
Keylatch 2.9.26 helps you review Solidity smart contract security audit findings with built-in tools. It uses Ask first mode so you can approve changes before they happen in the chat.
Read the main contract file, find external calls, and list every potential reentrancy risk in the project folder.
- list_dir
./contracts3 files - read_file
./contracts/Token.solloaded - grep
external call2 matches - write_file
./findings-log.txtsaved - Shell
your test commandexit 0
waiting for your OK before the next stepRejectAccept
34 MB
Setup program download
25 MB
Single .exe file
13
Interface options
Windows 10/11
x64 supported
SHA-256
Verify with certutil
Smart Contract Audit Process
Keylatch finds files, runs your checks, and writes notes while a person reviews every finding in the smart contract audit process carefully. Keylatch helps. It automates the repetitive steps so you can focus on logic errors. Scope definition and reading code by hand remain essential for accuracy.
Solidity audit with local tools
Keylatch uses list_dir to locate contract files and read_file to load the source code, then grep searches for every external call that might cause reentrancy, which is a solidity audit. Pause first. You use Ask first to pause before the edit happens. The agent writes the findings to a log file and shows you a diff. The app is not an audit, but it helps you review code on Windows 10/11. Does the audit reference survive upgrades when the code changes?
Tool trace
list_dir ./contracts → 3 files
read_file Token.sol → loaded
grep external call → 2 matches
write_file findings → saved
Shell your test command → exit 0Automated smart contract audit steps
Keylatch is an autonomous AI agent for Windows 10/11 (x64), version 2.9.26, and the automated smart contract audit uses Shell to run your static checker. Review complete. The agent uses grep to find every external call in the code. It then uses read_file to verify the output of the command. A number shows how many files were processed during the review. The agent uses write_file to create findings notes for your review.
Tool trace
list_dir . -> lists contract files and test directories
read_file Token.sol -> reads the source code for review
grep -n "external" Token.sol -> finds lines matching 'external'
Shell -> runs your test command and your static-check command
write_file findings-log.txt -> saves the findings logChecking arithmetic overflow in Solidity 0.8
Keylatch 2.9.26 for Windows 10/11 uses grep to find every state change in the contract so you can verify ownership logic and then uses edit_file to suggest a modifier for the contract. Review the diff. This step is part of the smart contract audit process. Approval modes include Ask first for safety during editing actions. The agent uses Shell to run your test command locally. You see the diff and approve the change immediately after review.
Overflow checks in Solidity 0.8
The agent uses read_file to load the math functions and checks for overflow in code older than Solidity 0.8 so that arithmetic logic is checked by a person. Check the log. You run your test command to confirm the fix for any issues found. grep lists the external calls for a person to read. Common security gaps in early web3 apps are found by grep. You keep the report with the exact code version for audit trails.
How it differs from a typical chat assistant
Keylatch version 2.9.26 runs the tools itself, so every action appears in the chat as a card with its real result and you see the file diff. Review complete.
| Typical chat assistant | Keylatch | |
|---|---|---|
| Tool Execution | Suggests commands | Runs commands |
| File Changes | Shows text | Shows diff |
| Approval | None | Ask first |
| Results | Describes results in text | Real exit code |
How to start reviewing
- Download the 34 MB setup program for Windows 10 or 11.
- Run the installer and launch the agent on your desktop.
- Open your project folder in the chat working directory.
- Select your model and press the Test button to
Who uses Keylatch for audits
Beginners use Keylatch to learn the review workflow and they see every tool action to understand the logic behind the code changes clearly now. Fix it. Solidity 0.8 and later versions check arithmetic by default now.
Practitioners use Keylatch to run their own checks and keep findings notes for later analysis while the agent saves the log file. Keylatch helps. The agent saves the log for you to review the findings.
Keylatch runs unit tests and verifies the exit code so you keep findings notes with the exact code version for the team review. Review first. Every step records in chat history.
Frequently asked questions
What is smart contract audit?
A smart contract audit is a structured review of contract code for security flaws, ending in a written list of findings with a severity and a suggested fix. It lowers risk. The code is public, so a bug can mean a permanent loss.
Is codewillmadeit.com the official Keylatch website?
Yes, codewillmadeit.com is the official Keylatch website, and you verify the installer by comparing its SHA-256 checksum with the published manifest using the Windows command certutil -hashfile. Match first. Press More info then Run anyway only after the checksum matches.
Does an audit still apply after the contract is upgraded?
A report covers only the code version and the scope that were reviewed, so any later change needs a new review to confirm the contract remains secure. No, it does not. An upgrade changes what an old audit says, so you must get a fresh review for the new version.
How does an automated review process work?
An automated review uses static checks and AI to find issues while requiring manual verification to confirm findings and dismiss false positives before deployment. Human judgment is essential. No tool replaces the reviewer entirely for final decisions on security.
How much does a smart contract security audit cost?
There is no fixed price for a professional audit because the cost depends on the amount and complexity of the code being reviewed by experts. Ask for quotes. A simple token is cheaper than custom logic and requires less time to complete the review process.
Can Keylatch replace a professional audit?
No, an automated check does not replace a professional audit when real funds are at stake, so you must confirm the findings yourself. Confirm them. The agent helps you find issues before you deploy the code.
How do teams handle contract auditing in house?
In-house auditing is a process where teams define the scope and write down what the contract should do, so that logic is verified before deployment and changes are tracked by the agent. Keylatch assists. It runs Shell commands and saves the detailed output for review.
Review your contracts now
Download the official Keylatch setup program, which is about 34 MB and works on Windows 10 or 11, so you can review your Solidity smart contracts for security flaws before deployment. Verify the SHA-256 checksum matches the manifest using certutil. Compare the hash.
Download Keylatch for Windows ↗Explore the site
Every page of this website is available in 20 languages. The app interface itself has 13 languages.
Product details ↗ Model configuration ↗ Audit workflows ↗ Download installer ↗ FAQ ↗ Privacy policy ↗
