coder-7b / README.md
coronerai's picture
Update README.md
32f5168 verified
|
Raw History Blame Contribute Delete
2.52 kB
---
license: apache-2.0
base_model: Qwen/Qwen2.5-Coder-7B-Instruct
library_name: transformers
pipeline_tag: text-generation
tags:
- solidity
- smart-contracts
- token-risk
- lora
language:
- en
---
![Actuary: price a token's life before your agent spends on it](https://actuaryai.pro/og.png)
# Actuary coder-7B
A small model that fixes the patterns the [Actuary](https://actuaryai.pro) scanner flags in an ERC-20 token contract: it takes a Solidity source plus the scanner's flags and returns a corrected contract and a short list of changes.
> Always compile and review the result yourself. A patch that compiles is not an audit. Not financial or security advice.
## What it fixes
The same patterns the Actuary pre-mortem scanner reports from source code:
`mint_with_live_owner`, `blacklist_function`, `pause_function`, `tax_changeable`, `risky_opcode` (selfdestruct, delegatecall, tx.origin) and `owner_privileges`.
## Training
- Base: Qwen2.5-Coder-7B-Instruct (Apache 2.0). Method: LoRA (rank 16) on 4-bit weights, one epoch (88 steps), then merged to 16-bit.
- Data: 1,400 synthetic examples. Each is a flawed token contract with its fix, generated from templates in two source layouts. **Every target is verified**: the corrected contract compiles with solc 0.8.24, keeps the ERC-20 interface and clears the flagged patterns. Generator and verifier: https://github.com/coroner-hash/ai/tree/main/coder
## Evaluation
A fix counts only if the patched contract compiles, keeps the ERC-20 interface, clears every flag and adds none. 40 held-out contracts in a third source layout the model never saw in training (greedy decoding):
| | Base model | coder-7B |
|---|---|---|
| Compiles | 1.00 | 0.925 |
| Flags cleared | 0.125 | 0.925 |
| Full fix (all checks) | 0.125 | 0.925 |
Returning the contract unchanged scores 0.05. In the layouts it was trained on the model scores 1.00, which mostly shows it learned the templates.
## Limits
- **Synthetic, narrow data.** All contracts are single-file ERC-20 variants without imports. Real contracts will be messier; expect lower numbers. This is a first version.
- About 1 in 13 outputs did not compile in the held-out test. Always compile.
- It removes risky features; it does not find new bugs, and it can change behaviour. Review the diff.
- Only the scanner's six patterns. Not a general Solidity auditor.
## Links
- Actuary: https://actuaryai.pro · X: https://x.com/useActuary
- Source, data generator and scorer: https://github.com/coroner-hash/ai