Skip to main content

Quickstart

Get your first Azimuth scan running against a smart contract repo.

Prerequisites

  • A GitHub account with access to your target repo
  • A smart contract project using Foundry or Hardhat
  • A TestMachine account (contact TestMachine for access)

1. Connect your repo

Link your GitHub repository through the TestMachine integration.

  1. Log in to TestMachine
  2. Navigate to Azimuth
  3. Connect your GitHub account
  4. Select the repository containing your smart contracts

Azimuth supports Foundry and Hardhat project structures. Make sure your repo compiles cleanly before triggering a scan.

2. Trigger a scan

Once connected, trigger a scan on your target contracts. Azimuth will:

  1. Prepare — compile the target and collect available documentation and onchain data
  2. Explore — analyze the codebase to extract intent, invariants, and scope
  3. Propose — identify locations where execution may conflict with intent (economic, structural, and invariant proposals)
  4. Consolidate — de-duplicate and prioritize proposals by severity
  5. Investigate — run parallel investigation agents to validate findings

3. Review results

Scan results include:

  • Intent summary — what the target is designed to do, derived from code and documentation
  • Findings — each with likelihood, severity, and impact classification (critical, high, medium, low)
  • Evidence — supporting details from the investigation agents

What to expect

  • Scans run automatically once triggered
  • Investigation depth depends on the complexity of the target contracts
  • Critical and high severity proposals are investigated first
  • Results are available in the TestMachine dashboard

Next steps

  • Azimuth Overview — understand the full pipeline (Preparation → Exploration → Proposal → Consolidation → Investigation)
  • CI/CD Integration — run scans automatically on every push
  • Attack Simulation — learn how RL agents explore exploit paths