PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Slither: The Leading Static Analyzer for Smart Contracts

blog.trailofbits.com | blog | #web3 | #smart-contracts | #research | #static-analysis | #blockchain | #slither
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A WETSEB@ICSE paper shows Slither outperforms other smart contract analyzers in speed, robustness, and false-positive balance, thanks to an SSA-based intermediate representation that eases extension.
Published
Collected

Related coverage

blog · hackenproof.com
Aptos Move Smart Contract Security: How Object Refs Leak and Global Storage Breaks
Unchecked borrow_global_mut, leaked object refs, and Block-STM races break Aptos protocols. See the $25.5M Thala exploit and an Aptos/Supra audit checklist.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry
HackenProof and Hack The Box turn blockchain security into a gamified CTF track with weekly challenges and a ten-quest series, giving top performers a path into the bug bounty ecosystem.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a Course for the Blockchain Industry
HackenProof has launched a blockchain-industry course with Hack The Box, the four-million-member ethical hacking platform, aimed at building practical blockchain security skills.
blog · hackenproof.com
How to use Slither for auditing smart contracts
A hands-on guide to Slither, the Python-based Solidity static analysis framework: installing via pip or Docker, pointing it at a contract, project or mainnet address, and reading its findings.
blog · hackenproof.com
How to hack everiToken?
An introduction to everiToken, a token-based public chain that replaces smart contracts with 'safe contracts' and BFT-DPOS consensus, plus node setup, API testing, and a node vulnerability.
blog · certik.com
CertiK Independently Verifies Sui's New Performance Benchmark
CertiK independently verified Sui’s Mainnet Tunnel performance campaign, which recorded more than 15.2 billion off-chain transactions across 7,680 tunnels at a peak of 40.68 million TPS.
Back