search

hashgraph / hedera-smart-contracts

Contains Hedera Smart Contract Service supporting files
Apache License 2.0
38 stars 53 forks source link

Explore Slither support #674

Closed Nana-EC closed 3 weeks ago

Nana-EC commented 7 months ago

Problem

It's unclear to what degree https://github.com/crytic/slither is supported on the network There was some previous exploration which potentially was blocked by some hardcoding on Slithers end that pointed only to the Hardhat EVM and didn't support pointing to other RPCs. We should confirm this

Solution

Explore https://github.com/crytic/slither as a POC and capture any integration issues encountered

Alternatives

No response

Nana-EC commented 3 weeks ago

@se7enarianelabs I think the Ariane labs team did this right. Please note the merged PR that resolved this and close it. If not let's comment here what's left. Thanks

se7enarianelabs commented 3 weeks ago

@se7enarianelabs I think the Ariane labs team did this right. Please note the merged PR that resolved this and close it. If not let's comment here what's left. Thanks

In this PR (https://github.com/hashgraph/hedera-smart-contracts/pull/767), we briefly analyzed the tools MAIAN, Manticore, and Slither. We also added an example Slither detector to find instances where ecrecover is used in Solidity contracts.