Skip to content

v0.3.1

Choose a tag to compare

@dehvCurtis dehvCurtis released this 17 Feb 07:31
· 20 commits to main since this release
d4cde4a

Added

  • Vulnerability name in findings — all output formats (text, JSON, SARIF) now show the detector name as a title (e.g. "Missing Owner Check") alongside the detector ID
  • 8 new FP-specific unit tests across 6 detectors (139 total tests)

Changed

  • CW-001 (integer overflow): Downgraded from Medium/Medium to Low/Low — Uint128/Uint256 panics are safe reverts, not exploitable. Skips test/mock/helper functions
  • CW-002 (reentrancy): Now only flags IBC handlers, reply handlers, and SubMsg dispatchers — CosmWasm is non-reentrant by design. Non-IBC execute handlers no longer flagged

Fixed

  • SOL-001 FP reduction: Skip internal helpers (_*, inner_*, do_*, handle_*), utility functions (validate*, serialize*, parse*), expanded non-signer param exclusions
  • SOL-010 FP reduction: Skip Anchor codegen files and functions, recognize intentionally global PDAs (b"config", b"state", b"vault", etc.)
  • INK-003 FP reduction: Skip known permissionless patterns (flip, increment, vote), PSP22/PSP34 standard methods (transfer, approve)
  • CW-009 FP reduction: Skip mock/helper/setup functions and test-related file paths
  • Updated test fixtures for SOL-010 and CW-002 to match new FP filters