search

crytic / rattle

evm binary static analysis
https://www.trailofbits.com/presentations/rattle/
344 stars 41 forks source link

Differences between slither & rattle #28

Closed wishucry closed 1 year ago

wishucry commented 1 year ago

I am wondering what differences between slither & rattle, from a development and functional point of view? Thanks a lot!

woodruffw commented 1 year ago

Slither takes source code and compiles it, while Rattle does static analysis on decompiled and EVM bytecode. In general, you probably want Slither -- it's stable and actively maintained, while Rattle was an internal research initiative that doesn't receive as much attention.

wishucry commented 1 year ago

Thank you so much for your reply!! Your team has a lot of tools for blockchain security: slither, manticore, rattle, evm_cfg_builder... So I wonder which is the best roadmap for beginners to learn contract code (especially bytecode) automatic analysis and vul detection. I feel very sorry about putting this question here...