Note: This technical write-up was created for the purposes of entering the Google Cloud & Devpost #AllThingsAgenticHackathon.
1. The Problem
Traditional smart contract security linters generate high false-positive rates while failing to catch deep, multi-block economic invariant breaks—such as ERC-4626 vault share inflation, lending pool bad debt, and low-float governance attacks.
2. Technical Architecture & Google Tech Stack
The Cybernetic Security Fleet is an autonomous 133-module auditing rig designed to automate the discovery, invariant fuzzing, exploit proof-of-concept synthesis, and disclosure lifecycle.
- Agent Orchestration & Reasoning: Google GenAI SDK orchestrating Gemini and Gemma models to analyze AST graphs and generate standalone Foundry exploit code.
- Google Cloud Infrastructure: Telemetry ingestion, compute execution, and audit artifact archiving hosted on Google Cloud Run and GCP backend services.
- Invariant & Fuzzing Engines: Stateful execution harnesses generating zero-phantom-pass test coverage.
3. Key Achievements
100% Reproducible Exploits: Discovered invariant breaches are automatically transpiled into runnable Foundry tests.
Instant Triage & Dispatch: Real-time generation of markdown disclosure reports alongside Discord webhook breach notifications.
Test Suite: 292/292 tests passing across continuous verification pipelines.
Built with Google Cloud, Gemini, and Python.
Early Access for Protocols & Security Teams
We are opening closed pilot testing for Web3 teams looking to run autonomous invariant auditing and AST decompilation across their EVM codebases.
-
If you want to run your contracts through the Cybernetic Security Fleet harness before mainnet deployment, join our pilot waitlist here:
docs.google.com
