Skip to content

v0.6.0

Compare
Choose a tag to compare
@ndkirillov ndkirillov released this 15 Feb 10:10
· 77 commits to master since this release
602d078

Major Updates

Reworks and additions

  1. Slitherin Arbitrum: New Slitherin custom plugin (--arbitrum) which includes 3 Arbitrum-specific security detectors. Thx @Yhtiyar and @olegggatttor.
  2. pess-arb-solidity-version detector: New Arbitrum-specific detector which spots usage of block.number and block.timestamp.
  3. pess-arb-prevrandao-difficulty detector: New Arbitrum-specific detector which spots usage of prevRandao/difficulty.
  4. pess-arb-solidity-version detector: New Arbitrum-specific detector which spots usage of solidity version >= 0.8.20.
  5. pess-potential-arithmetic-overflow detector: New detector. The detector sees if there are assignments/returns that calculate some arithmetic expressions and if some intermediate calculations contain a type that is lower than the expected result. Thx @olegggatttor.
  6. pess-aave-flashloan-callback detector: Improvement. Now detector also spots the callback cases of Uniswap V3. Thx @Yhtiyar.
  7. Slitherin-benchmark. We created a benchmark with database of contracts on which we run our detectors and measure the FP rates. Thx @nikolay19

Crucial Fixes

  1. pess-ecrecover detector: Bug fix. Handles solidity types properly. Thx @olegggatttor.
  2. Slitherin CLI: Improvement. Now handles errors properly. Thx @Yhtiyar.

Minor Updates and Optimization

Minor Fixes

  1. pess-strange-setter detector. Optimization. Less FP. Thx @olegggatttor.
  2. pess-unprotected-initialize detector. Optimization. Less FP. Thx @olegggatttor.
  3. pess-call-forward-to-protected detector. Optimization. Less FP. Skips standard libraries (OZ/Uniswap/Balancer). Thx @olegggatttor.
  4. pess-public-vs-external detector. Optimization. Less FP. Skips constructor functions. Thx @olegggatttor.