I’m releasing Hound, my agent-based code analyzer that has earned an actual $15k bug bounty

A short while ago I published the latest iteration of Hound, an agent-based framework that tries to emulate human reasoning to find logic bugs in source code. This is the latest version that has been tested rudimentary. It is built mostly with smart contract analysis in mind, but is language agnostic – that said, it will probably not work well with large codebases yet (come sampling is not well-tested).

Last year, an earlier version of this found a medium-risk bug in a project listed on Immunefi that paid $15k which was more than enough to pay for API costs! It also found 1/3 of the bugs in a Code4rena contest codebase.

It does not come close to a human expert yet, but it’s definitely an improvement from just copy/pasting the code into ChatGPT.

Note that this is a research prototype so no guarantees that it works well across the board.

Links

Github repo

Blog post explaining how it works

Paper will probably follow later once it’s properly benchmarked.

submitted by /u/Rude_Ad3947
[link] [comments]

August 28, 2025
Read More >>