[Bug] Safety classifier false positives blocking authorized smart contract security audits on local forks

Status Open
Reported on v2.1.281
Maintainer reply None cached
Activity 0 comments · opened Sep 24, 2026

Bug Description
False positives from the safety classifier during authorised bug bounty work.

Context: I run a human-reviewed bug bounty practice. On 2026-09-24 a Claude Code session audited the
Aera V3 contracts, which are in scope of Aera's public Immunefi bug bounty
(https://immunefi.com/bug-bounty/aera/). All testing ran in local Foundry tests on local chain forks.
Nothing was broadcast to any network, and every finding is reviewed by me before any submission.

What happened: parallel audit sub-agents from standard Solidity audit skills (pashov solidity-auditor,
0xsimao-ai) were stopped with "safeguards flagged this message". That was 7 of 12 agents in one
skill and 2 of 12 in the other, and most of the rest were cut off partway. A separate agent's write of
a plain protocol-description document was also blocked once, then went through on retry.

Impact: most of the audit coverage was lost and tokens were wasted on agents that died, on work that
exists to find bugs and disclose them responsibly.

Ask: fewer false positives for authorised, fork-only smart contract security review. Or, if there's a
way for verified security researchers to get adjusted safeguards, please point me to it.

Environment Info

  • Platform: win32
  • Terminal: windows-terminal
  • Version: 2.1.281
  • Feedback ID: 32fa1f31-8b89-4bbf-934d-30efa40122de

Errors

[{"error":"TelemetrySafeError: VirtualMessageList: itemKeys/messages length desync (keys=71 messages=70 range=[53,71))\n    at ZT (B:/~BUN/root/chunk-t0gqpaxf.js:24:28891)\n    at Vc (B:/~BUN/root/chunk-t0gqpaxf.js:24:20085)\n    at $s (B:/~BUN/root/chunk-w5ra8acm.js:18:20178)\n    at pu (B:/~BUN/root/chunk-w5ra8acm.js:18:38345)\n    at Zh (B:/~BUN/root/chunk-w5ra8acm.js:18:84428)\n    at db (B:/~BUN/root/chunk-w5ra8acm.js:18:83428)\n    at Pu (B:/~BUN/root/chunk-w5ra8acm.js:18:83257)\n    at Yh (B:/~BUN/root/chunk-w5ra8acm.js:18:79781)\n    at mt (B:/~BUN/root/chunk-w5ra8acm.js:18:6261)\n    at ei (B:/~BUN/root/chunk-w5ra8acm.js:18:4792)","timestamp":"2026-09-24T10:20:53.431Z"}]

View original on GitHub ↗