-
Notifications
You must be signed in to change notification settings - Fork 42
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Run Slither for static analysis #243
Comments
What is this useful for? First time seeing this |
It's mostly useful for running a suite of vulnerability detectors that are not detected by the compiler - see the README. I've known about Slither for a long time, it's a popular tool in Ethereum. |
riiight, so I just installed and tried to use it, but got this error ..
Unfortunately, Slither does not support the latest feature introduced in Solidity v0.8.13, that is, using the I will label this issue as "backlog" for the time being. |
Update: the Slither team has just marked issue #1352 as completed. Will remove the "backlog" label from our issue. |
We're currently waiting for the following bug to be fixed so we can run Slither on the There's an open PR with a fix: |
That PR has been merged, so we should be able to run Slither now in this code base (though we have to build it from the source since they didn't release v0.9.3 just yet). I will remove the |
I managed to run Slither using a version built from commit 776dcab. Notes:
Going to drop Warp.dev permanlinks that contain the full report for all contracts: |
Note: we will integrate Slither in CI once they ship a new version to PyPI, so that their GitHub Action will pull a version that works with user-defined value types. |
See the Static Analyzers section of the Foundry Book.
The text was updated successfully, but these errors were encountered: