bitcart
Free and open-source self-hosted payment processor for BTC, LTC, BCH, XMR, ETH, TRX, USDT and more
Scanned: February 16, 2026
Report Version: 1.0.0
How does your project compare?
Scan your repo free →Overall Grade
A1,862 total findings
Architecture
A66
Correctness
A8
Performance
D1762
Security
A26
What Traditional Tools Missed
| Category | Colosseum | Bandit | Semgrep |
|---|---|---|---|
| Bandit | 932 | 830 | 0 |
| Semgrep | 932 | 0 | 7 |
| Total | 1,862 | 830 | 7 |
1,862 findings (100%) were not detected by Bandit or Semgrep. These include compound vulnerabilities, logic errors, and context-dependent security issues that rule-based scanners aren't designed to catch.
Notable Findings
CriticalPerformance
Potential hotspot: get_proxy_settings has high complexity score (11)
Impact: Potential hotspot: get_proxy_settings has high complexity score (11)
Recommended Fix: Review and remediate.
CriticalPerformance
Potential hotspot: load_env has high complexity score (10)
Impact: Potential hotspot: load_env has high complexity score (10)
Recommended Fix: Review and remediate.
CriticalPerformance
Potential hotspot: add_privkey has high complexity score (15)
Impact: Potential hotspot: add_privkey has high complexity score (15)
Recommended Fix: Review and remediate.
CriticalPerformance
Potential hotspot: get_final_tx_address has high complexity score (22)
Impact: Potential hotspot: get_final_tx_address has high complexity score (22)
Recommended Fix: Review and remediate.
CriticalPerformance
Potential hotspot: load_account_from_key has high complexity score (10)
Impact: Potential hotspot: load_account_from_key has high complexity score (10)
Recommended Fix: Review and remediate.
CriticalPerformance
Potential hotspot: __init__ has high complexity score (11)
Impact: Potential hotspot: __init__ has high complexity score (11)
Recommended Fix: Review and remediate.
CriticalPerformance
Potential hotspot: process_new_payment has high complexity score (10)
Impact: Potential hotspot: process_new_payment has high complexity score (10)
Recommended Fix: Review and remediate.
Responsible Disclosure
This public report is intended to demonstrate the depth of analysis possible with modern code scanning tools and to help the broader open source community understand common vulnerability patterns.
Scan Your Python Repo Free
Find vulnerabilities traditional tools miss. Deep analysis of Python codebases with side-by-side tool comparison.
Embed This Badge
[](https://battleharden.dev/reports/bitcart)