TheDude
/
mythril
mirror of https://github.com/ConsenSys/mythril
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Hedera, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
3634 Commits
97 Branches
171 Tags
59 MiB
 
 
 
 
 
 
Tag: Branch: Tree: feature/ignore-regressions
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'feature/ignore-regressions'
${ noResults }
mythril/tests/testdata/outputs_expected/ether_send.sol.o.markdown

918 B
Raw Permalink Blame History

Analysis results for test-filename.sol

Unprotected Ether Withdrawal

  • SWC ID: 105
  • Severity: High
  • Contract: Unknown
  • Function name: withdrawfunds()
  • PC address: 722
  • Estimated Gas Usage: 1138 - 1749

Description

Anyone can withdraw ETH from the contract account. Arbitrary senders other than the contract creator can withdraw ETH from the contract account without previously having sent an equivalent amount of ETH to it. This is likely to be a vulnerability.

Integer Overflow

  • SWC ID: 101
  • Severity: High
  • Contract: Unknown
  • Function name: invest()
  • PC address: 883
  • Estimated Gas Usage: 6598 - 26883

Description

The binary addition can overflow. The operands of the addition operation are not sufficiently constrained. The addition could therefore result in an integer overflow. Prevent the overflow by checking inputs or ensure sure that the overflow is caught by an assertion.