Re Scanning
Learn when and how to re-scan your contracts. Re-scan when you: - Fix vulnerabilities - Add new features - Refactor existing code - Update dependencies -...
Re-Scanning
Learn when and how to re-scan your contracts.
When to Re-Scan
After Code Changes
Re-scan when you:
- Fix vulnerabilities
- Add new features
- Refactor existing code
- Update dependencies
- Change contract logic
Before Deployment
Always re-scan:
- Before mainnet deployment
- Before testnet launch
- After any code review changes
- When moving to production
Periodic Checks
Consider regular scans:
- Weekly during active development
- Before each release
- When new scanners are added
How to Re-Scan
Quick Re-Scan
Repeat the same scan:
- Go to Scans
- Find the original scan
- Click Re-Scan
- Same scanners run automatically
Modified Re-Scan
Change settings before re-scanning:
- Go to Scans
- Find the original scan
- Click Re-Scan
- Click Modify Settings
- Adjust scanners or options
- Click Start Scan
From Contract
Re-scan from contract view:
- Go to Contracts
- Click the contract
- Click Scan
- Choose preset or custom
- Click Start Scan
Comparing Scans
Side-by-Side Comparison
See what changed between scans:
- Go to Scans
- Select two scans (checkboxes)
- Click Compare
- View differences
Comparison Shows
| Section | Shows |
|---|---|
| New findings | Issues introduced since last scan |
| Fixed findings | Issues no longer present |
| Unchanged | Persistent issues |
| Code diff | Source code changes |
Using Comparison
- Verify fixes worked
- Catch regressions
- Track progress over time
Scan History
Viewing History
Each contract has a scan history:
- Go to Contracts
- Click the contract
- Scroll to Scan History
Shows:
- All scans for this contract
- Date and time
- Scanners used
- Finding counts
Trend Analysis
The dashboard shows:
- Findings over time
- Trend direction (improving/worsening)
- Comparison to previous scans
Re-Scan Strategies
Fix and Verify
- Run initial scan
- Fix critical/high issues
- Re-scan to verify
- Repeat until clean
Progressive Deepening
- Start with Quick scan
- Fix obvious issues
- Run Standard scan
- Fix remaining issues
- Run Deep scan before audit
Continuous Scanning
For CI/CD integration:
- Scan on every PR
- Block merge on critical findings
- Track trends over time
Credits and Quotas
Re-Scan Costs
Each re-scan uses 1 scan credit/quota:
- Same as initial scans
- No discount for re-scans
- Project scans = 1 credit
Optimizing Credits
- Use Quick scans during development
- Use Deep scans only for releases
- Fix issues before re-scanning
Best Practices
Before Re-Scanning
- Verify code changes - Ensure fixes are complete
- Commit changes - Track what was changed
- Update source - Upload new version if needed
After Re-Scanning
- Compare results - See what changed
- Verify fixes - Confirm issues resolved
- Check for regressions - New issues introduced?
- Document progress - Note what was fixed
Development Workflow
Code → Quick Scan → Fix → Quick Scan → ...
↓
When stable → Standard Scan → Fix → ...
↓
Before release → Deep Scan → Final Fixes → Deploy
Automation
CI/CD Integration
Automate re-scanning in your pipeline:
- Scan on PR creation
- Scan on merge to main
- Scan before deployment
See CI/CD Integration.
Scheduled Scans
On team plans:
- Schedule recurring scans
- Daily, weekly, or monthly
- Get notified of changes
FAQ
Q: Does re-scanning update the same results?
A: No. Each scan creates new results. Compare to see differences.
Q: Can I re-scan with different code?
A: Yes. Update the contract source first, then re-scan.
Q: How do I know if a fix worked?
A: Compare scans. Fixed issues show in "Resolved" section.
Q: Should I re-scan after every change?
A: During development, use Quick scans. Save Deep scans for milestones.
Next Steps
- Managing Findings - Track fixes
- CI/CD Integration - Automate scanning
- Understanding Results - Interpret findings