Could madmax defect reentrance or other famous vulnerability?

[ouerum]

Hi, I have used your famous Ethereum smart contract vulnerability detect tool, Madmax. I find only 3 vulnerability about DOS can be detected. Could madmax defect other bug? I can't find the souffle file about other bug except oldclient.dl. But the result from this souffle file is not well, more than 50% was flagged with reentrance, the false positive may be too high. Another word, I am interesting in your related work, gigahorse. The result of gigahorse from contract-lib is lower than 50% in detecting reentrancy, have you change to use another souffle file to detect, or the same file oldclient.dl?

[nevillegrech]

Hi the reentrancy implementation in contract-library.com has nothing to do with oldclient.dl and uses Gigahorse, not Vandal. MadMax only detects gas-related vulnerabilities, although the techniques developed have inspired later work such as Gigahorse.

[ouerum]

Thanks for your respond. Have you published the datalog file of the implementation in contract-library.com in github?

[nevillegrech]

No we haven't yet

[ouerum]

Well, I am looking forward your related work about smart contract analysis. The job of madmax and gigahorse is prefect!

[nevillegrech]

Hi ouerum, it should now be relatively straightforward to implement your client (or other clients) using the underlying framework.

https://github.com/nevillegrech/gigahorse-toolchain

[ouerum]

Got it, I have forked gigahorse a week ago, thank a lot for your notifications. Gigahorse has helped my analysis project for smart contracts. 😃

在 2020年12月27日，上午4:38，Neville Grech notifications@github.com 写道：



Closed #3https://github.com/nevillegrech/MadMax/issues/3.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/nevillegrech/MadMax/issues/3#event-4149827405, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AICAX6BMNPMTN2JSLLDDT2LSWZCU5ANCNFSM4LRFS4BQ.

[ouerum]

Hello, I have a question after reading your paper 'Elipmoc: Advanced Decompilation of Ethereum Smart Contracts’. I have clone the Gigahorse project from Github in Dec 2020(0be6260f), is it the code of Elipmoc (gigahorse 2.0) or the original Gigahorse?

Thanks a lot for your reply. 在 2020年12月27日 +0800 10:15，何 嘉浩 @.***>，写道：

Got it, I have forked gigahorse a week ago, thank a lot for your notifications. Gigahorse has helped my analysis project for smart contracts. 😃

在 2020年12月27日，上午4:38，Neville Grech @.***> 写道：

Closed #3. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe.