c-layer / contracts

C-Layer Ethereum monorepo
MIT License
73 stars 14 forks source link

Writing security test audits for contracts using the scribble framework from consensys. #34

Open GrandGarcon opened 3 years ago

GrandGarcon commented 3 years ago

Hi @sirhill , greetings for the new version of C-Layer , i have been experimenting with

This new framework allows the way to convert the sol files into flattened code , writing the strict assertions , for instance checking the code for an particular RBACWith multisig.sol

    public PublicMultiSig(_threshold, _duration, _participants, _weights)
  {
    /// if_succeeds {:msg : "checking-with-participant-roles" }  returns "_approvers == onlyApprovers ;
    updateManyParticipantsRoles(
      _participants,
      _suggesters,
      _approvers,
      _executers
    );
  }

PS: i might be wrong with the previous example , but just wanted to give an indication of the capablities .

so i wanted to ask will you be eager to talk about the possiblity of doing strict assertion checks .

Cheers

sirhill commented 3 years ago

Hi @GrandGarcon,

It's definitely a bright idea! If you want to move forward, I suggest that maybe you experiment on one contract. RBACWithMultisig.sol or other multisig are a very good example, they are relatively simple and as well very critical.

Can you create a dedicated branch for experimenting with scribble ?

GrandGarcon commented 3 years ago

Thanks for the response , ok sure thing . and credits to @bertux for the suggestion .