mirror of https://github.com/ConsenSys/mythril
blockchainethereumsmart-contractssoliditysecurityprogram-analysissecurity-analysissymbolic-execution
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
18 lines
1.7 KiB
18 lines
1.7 KiB
# Smart Contract Security Issues
|
|
|
|
| Issue | Description | Mythril Detection Module(s) |
|
|
|------:|-------------|------------|
|
|
|Unprotected functions| Critical functions such as sends with non-zero value or suicide() calls are callable by anyone, or msg.sender is compared against an address in storage that can be written to. E.g. Parity wallet bugs. | [unchecked_suicide](mythril/analysis/modules/unchecked_suicide.py), [ether_send](mythril/analysis/modules/ether_send.py) |
|
|
|Missing check on CALL return value| | [unchecked_retval](mythril/analysis/modules/unchecked_retval.py)
|
|
|Re-entrancy| | [call to untrusted contract with gas](mythril/analysis/modules/call_to_dynamic_with_gas.py) |
|
|
|Multiple transfers in a single transaction| | | |
|
|
|Function call to untrusted contract| | |[call to untrusted contract with gas](mythril/analysis/modules/call_to_dynamic_with_gas.py) |
|
|
|Delegatecall or callcode to untrusted contract| | [delegatecall_forward](mythril/analysis/modules/delegatecall_forward.py), [delegatecall_to_dynamic.py](mythril/analysis/modules/delegatecall_to_dynamic.py) |
|
|
|Integer overflow/underflow| | [integer_underflow](mythril/analysis/modules/integer_underflow.py) |
|
|
|Type confusion| | |
|
|
|Predictable RNG| | |
|
|
|Transaction order dependence| | | |
|
|
|Timestamp dependence| | |
|
|
|Information exposure| | |
|
|
|Payable transaction does not revert in case of failure | | |
|
|
|Call depth attack| | |
|
|
|