OpenViSTAI · Agents · Blockchain · Crypto
Submit a project
Menu
AI Security & Safety

L3X

L3X is a Rust command-line static analyzer that checks general Rust, Solana Rust, and Ethereum Solidity code against vulnerability patterns. It can use language models to validate detected findings and generates reports containing findings and safe patterns.

Explore the practical guide ↓

Independent OpenViST project profile, based on linked sources.

L3X — OpenViST project profile in AI Security & Safety.
OpenViST project illustration. See the linked sources for product details.
Understand the project

Practical overview

When it fits

Use L3X when you need a CLI-based pattern scan and report for supported Rust or Solidity code, with optional language-model validation of detected findings.

Who it is for

  • Developers working with Rust code who want to scan for pattern-based vulnerabilities.
  • Solana developers working with Rust smart contracts.
  • Ethereum developers working with Solidity contracts.

Documented uses

  • Scan a code directory for vulnerabilities covered by L3X's Rust or Solidity patterns.
  • Validate detected findings with language models when configured.
  • Generate a report of findings and safe patterns for review.
Before you choose

Requirements & limits

  • The tool is invoked from the command line and its documented workflow uses Cargo.
  • An OpenAI API key is required for the documented validation setup.
  • Validation can be skipped, limited to the default critical and high findings, or expanded to all severities.
  • The README labels L3X an MVP and says vulnerabilities are detected based on patterns.

Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.

Source-based practical guide

Build and run a L3X scan

Build the CLI and scan a directory containing supported Rust or Solidity code.

Before you start

  • Rust toolchain with Cargo, as indicated by the documented cargo build and cargo run commands.
  • A directory of Rust or Solidity code to analyze.
  • An OpenAI API key set as OPENAI_KEY for validation.

Steps

  1. Build the project with cargo build.

  2. Compile and start it with cargo run.

  3. Run l3x with the target directory, for example: l3x smart-contracts-folder-to-analyse.

  4. Use --all-severities to validate all findings, --no-validation to skip validation, or --model=MODEL to specify an OpenAI model.

Expected outcome

L3X generates a report containing detected vulnerabilities and safe patterns; validated findings are included when validation is enabled.

Guide limitations

  • The README describes the project as an MVP and says vulnerability detection is based on patterns.
  • The documented default validates only critical and high severity findings.
  • The supplied instructions document OpenAI key configuration; support for other model providers is not established.
Documentation 1 ↗
Evidence and transparency

Sources & review

Official repository ↗
Source record details
Source availability
Active
Sources checked
18 October 2026
Original website title
VulnPlanet/l3x · Official homepage title · retained in its source language
How we review sourcesSuggest a correction