Qbuild audit and test tool for Qubic SC

Qbuild process automatically your smart contract to identify vulnerabilities, categorize them by severity, how they could be exploited and suggest recommendations to avoid them, generating a complete report. Moreover, the platform deploys the smart contract in a controlled Qubic testing environment, building automatically a complete battery of tests to exploit each vulnerability, calling the identified smart contract procedures and/or functions with specific payload or arguments, allowing developers to verify the real impact of each potential vulnerability without the need to build any specific test tool. Just fasten your seatbelt, keep your seat upright, and press the button to see what happens! QBuild integrates a wide range of technologies to provide a seamless and powerful development experience for Qubic smart contracts. At the core of our system is a dedicated Qubic test node, where contracts are deployed and executed in a fully controlled environment. We’ve leveraged the Qubic TypeScript library, combined with reverse engineering of QForge's frontend, to implement key functionalities such as broadcasting transactions and querying smart contracts. Additionally, we make extensive use of the Qubic CLI and connect directly to the Qubic RPC interface to interact with the network at a low level. For vulnerability analysis and audit generation, QBuild uses advanced large language models, including LLaMA 3.3 70B Versatile via the Groq API, to identify issues and generate detailed, actionable audit reports. On the frontend, we built the platform using Angular, enhanced by the Vristo UI kit and styled with Tailwind CSS to create a clean and intuitive interface. The backend is built on .NET 8.0, and the full infrastructure is hosted on AWS: – AWS Lambda and API Gateway power the backend, – The frontend is served via S3 and CloudFront, – And data persistence is handled through a PostgreSQL database.