mirror of https://github.com/crytic/slither
Josselin
4 years ago
commit
0dbcae7692
@ -0,0 +1,48 @@ |
||||
--- |
||||
name: Lint Code Base |
||||
|
||||
defaults: |
||||
run: |
||||
# To load bashrc |
||||
shell: bash -ieo pipefail {0} |
||||
|
||||
on: |
||||
pull_request: |
||||
branches: [master, dev] |
||||
schedule: |
||||
# run CI every day even if no PRs/merges occur |
||||
- cron: '0 12 * * *' |
||||
|
||||
jobs: |
||||
build: |
||||
name: Lint Code Base |
||||
runs-on: ubuntu-latest |
||||
|
||||
steps: |
||||
- name: Checkout Code |
||||
uses: actions/checkout@v2 |
||||
|
||||
- name: Set up Python 3.6 |
||||
uses: actions/setup-python@v2 |
||||
with: |
||||
python-version: 3.6 |
||||
|
||||
- name: Install dependencies |
||||
run: | |
||||
pip install . |
||||
pip install deepdiff numpy |
||||
|
||||
mkdir -p .github/linters |
||||
cp pyproject.toml .github/linters |
||||
|
||||
- name: Black |
||||
uses: docker://github/super-linter:v3 |
||||
if: always() |
||||
env: |
||||
# run linter on everything to catch preexisting problems |
||||
VALIDATE_ALL_CODEBASE: true |
||||
DEFAULT_BRANCH: master |
||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |
||||
# Run only black |
||||
VALIDATE_PYTHON_BLACK: true |
||||
PYTHON_BLACK_CONFIG_FILE: pyproject.toml |
||||
@ -0,0 +1,49 @@ |
||||
--- |
||||
name: Lint Code Base |
||||
|
||||
defaults: |
||||
run: |
||||
# To load bashrc |
||||
shell: bash -ieo pipefail {0} |
||||
|
||||
on: |
||||
pull_request: |
||||
branches: [master, dev] |
||||
schedule: |
||||
# run CI every day even if no PRs/merges occur |
||||
- cron: '0 12 * * *' |
||||
|
||||
jobs: |
||||
build: |
||||
name: Lint Code Base |
||||
runs-on: ubuntu-latest |
||||
|
||||
steps: |
||||
- name: Checkout Code |
||||
uses: actions/checkout@v2 |
||||
|
||||
- name: Set up Python 3.6 |
||||
uses: actions/setup-python@v2 |
||||
with: |
||||
python-version: 3.6 |
||||
|
||||
- name: Install dependencies |
||||
run: | |
||||
pip install . |
||||
pip install deepdiff numpy |
||||
|
||||
mkdir -p .github/linters |
||||
cp pyproject.toml .github/linters |
||||
|
||||
- name: Pylint |
||||
uses: docker://github/super-linter:v3 |
||||
if: always() |
||||
env: |
||||
# run linter on everything to catch preexisting problems |
||||
VALIDATE_ALL_CODEBASE: true |
||||
DEFAULT_BRANCH: master |
||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |
||||
# Run only pylint |
||||
VALIDATE_PYTHON: true |
||||
VALIDATE_PYTHON_PYLINT: true |
||||
PYTHON_PYLINT_CONFIG_FILE: pyproject.toml |
||||
@ -0,0 +1,61 @@ |
||||
pragma solidity ^0.4.0; |
||||
|
||||
contract ReentrancyBenign { |
||||
uint8 anotherVariableToChange; |
||||
uint8 counter = 0; |
||||
|
||||
function bad0() public { |
||||
if (!(msg.sender.call())) { |
||||
revert(); |
||||
} |
||||
counter += 1; |
||||
} |
||||
|
||||
function bad1(address target) public { |
||||
(bool success) = target.call(); |
||||
require(success); |
||||
counter += 1; |
||||
} |
||||
|
||||
function bad2(address target) public { |
||||
(bool success) = target.call(); |
||||
if (success) { |
||||
address(target).call.value(1000)(); |
||||
counter += 1; |
||||
} |
||||
else { |
||||
revert(); |
||||
} |
||||
} |
||||
|
||||
function bad3(address target) public { |
||||
externalCaller(target); |
||||
varChanger(); |
||||
ethSender(target); |
||||
} |
||||
|
||||
function bad4(address target) public { |
||||
externalCaller(target); |
||||
ethSender(address(0)); |
||||
varChanger(); |
||||
address(target).call.value(2)(); |
||||
} |
||||
|
||||
function bad5(address target) public { |
||||
ethSender(address(0)); |
||||
varChanger(); |
||||
ethSender(address(0)); |
||||
} |
||||
|
||||
function externalCaller(address target) private { |
||||
address(target).call(); |
||||
} |
||||
|
||||
function ethSender(address target) private { |
||||
address(target).call.value(1)(); |
||||
} |
||||
|
||||
function varChanger() private { |
||||
anotherVariableToChange++; |
||||
} |
||||
} |
||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,261 @@ |
||||
""" |
||||
tests for `slither.core.declarations.Function`. |
||||
tests that `tests/test_function.sol` gets translated into correct |
||||
`slither.core.declarations.Function` objects or its subclasses |
||||
and that these objects behave correctly. |
||||
""" |
||||
|
||||
from slither import Slither |
||||
from slither.core.declarations.function import FunctionType |
||||
from slither.core.solidity_types.elementary_type import ElementaryType |
||||
|
||||
|
||||
def test_functions(): |
||||
# pylint: disable=too-many-statements |
||||
slither = Slither("tests/test_function.sol") |
||||
functions = slither.contracts_as_dict["TestFunction"].available_functions_as_dict() |
||||
|
||||
f = functions["external_payable(uint256)"] |
||||
assert f.name == "external_payable" |
||||
assert f.full_name == "external_payable(uint256)" |
||||
assert f.canonical_name == "TestFunction.external_payable(uint256)" |
||||
assert f.solidity_signature == "external_payable(uint256)" |
||||
assert f.signature_str == "external_payable(uint256) returns(uint256)" |
||||
assert f.function_type == FunctionType.NORMAL |
||||
assert f.contains_assembly is False |
||||
assert f.can_reenter() is False |
||||
assert f.can_send_eth() is False |
||||
assert f.is_constructor is False |
||||
assert f.is_fallback is False |
||||
assert f.is_receive is False |
||||
assert f.payable is True |
||||
assert f.visibility == "external" |
||||
assert f.view is False |
||||
assert f.pure is False |
||||
assert f.is_implemented is True |
||||
assert f.is_empty is False |
||||
assert f.parameters[0].name == "_a" |
||||
assert f.parameters[0].type == ElementaryType("uint256") |
||||
assert f.return_type[0] == ElementaryType("uint256") |
||||
|
||||
f = functions["public_reenter()"] |
||||
assert f.name == "public_reenter" |
||||
assert f.full_name == "public_reenter()" |
||||
assert f.canonical_name == "TestFunction.public_reenter()" |
||||
assert f.solidity_signature == "public_reenter()" |
||||
assert f.signature_str == "public_reenter() returns()" |
||||
assert f.function_type == FunctionType.NORMAL |
||||
assert f.contains_assembly is False |
||||
assert f.can_reenter() is True |
||||
assert f.can_send_eth() is False |
||||
assert f.is_constructor is False |
||||
assert f.is_fallback is False |
||||
assert f.is_receive is False |
||||
assert f.payable is False |
||||
assert f.visibility == "public" |
||||
assert f.view is False |
||||
assert f.pure is False |
||||
assert f.is_implemented is True |
||||
assert f.is_empty is False |
||||
assert f.parameters == [] |
||||
assert f.return_type is None |
||||
|
||||
f = functions["public_payable_reenter_send(bool)"] |
||||
assert f.name == "public_payable_reenter_send" |
||||
assert f.full_name == "public_payable_reenter_send(bool)" |
||||
assert f.canonical_name == "TestFunction.public_payable_reenter_send(bool)" |
||||
assert f.solidity_signature == "public_payable_reenter_send(bool)" |
||||
assert f.signature_str == "public_payable_reenter_send(bool) returns()" |
||||
assert f.function_type == FunctionType.NORMAL |
||||
assert f.contains_assembly is False |
||||
assert f.can_reenter() is True |
||||
assert f.can_send_eth() is True |
||||
assert f.is_constructor is False |
||||
assert f.is_fallback is False |
||||
assert f.is_receive is False |
||||
assert f.payable is True |
||||
assert f.visibility == "public" |
||||
assert f.view is False |
||||
assert f.pure is False |
||||
assert f.is_implemented is True |
||||
assert f.is_empty is False |
||||
assert f.parameters[0].name == "_b" |
||||
assert f.parameters[0].type == ElementaryType("bool") |
||||
assert f.return_type is None |
||||
|
||||
f = functions["external_send(uint8)"] |
||||
assert f.name == "external_send" |
||||
assert f.full_name == "external_send(uint8)" |
||||
assert f.canonical_name == "TestFunction.external_send(uint8)" |
||||
assert f.solidity_signature == "external_send(uint8)" |
||||
assert f.signature_str == "external_send(uint8) returns()" |
||||
assert f.function_type == FunctionType.NORMAL |
||||
assert f.contains_assembly is False |
||||
assert f.can_reenter() is True |
||||
assert f.can_send_eth() is True |
||||
assert f.is_constructor is False |
||||
assert f.is_fallback is False |
||||
assert f.is_receive is False |
||||
assert f.payable is False |
||||
assert f.visibility == "external" |
||||
assert f.view is False |
||||
assert f.pure is False |
||||
assert f.is_implemented is True |
||||
assert f.is_empty is False |
||||
assert f.parameters[0].name == "_c" |
||||
assert f.parameters[0].type == ElementaryType("uint8") |
||||
assert f.return_type is None |
||||
|
||||
f = functions["internal_assembly(bytes)"] |
||||
assert f.name == "internal_assembly" |
||||
assert f.full_name == "internal_assembly(bytes)" |
||||
assert f.canonical_name == "TestFunction.internal_assembly(bytes)" |
||||
assert f.solidity_signature == "internal_assembly(bytes)" |
||||
assert f.signature_str == "internal_assembly(bytes) returns(uint256)" |
||||
assert f.function_type == FunctionType.NORMAL |
||||
assert f.contains_assembly is True |
||||
assert f.can_reenter() is False |
||||
assert f.can_send_eth() is False |
||||
assert f.is_constructor is False |
||||
assert f.is_fallback is False |
||||
assert f.is_receive is False |
||||
assert f.payable is False |
||||
assert f.visibility == "internal" |
||||
assert f.view is False |
||||
assert f.pure is False |
||||
assert f.is_implemented is True |
||||
assert f.is_empty is False |
||||
assert f.parameters[0].name == "_d" |
||||
assert f.parameters[0].type == ElementaryType("bytes") |
||||
assert f.return_type[0] == ElementaryType("uint256") |
||||
|
||||
f = functions["fallback()"] |
||||
assert f.name == "fallback" |
||||
assert f.full_name == "fallback()" |
||||
assert f.canonical_name == "TestFunction.fallback()" |
||||
assert f.solidity_signature == "fallback()" |
||||
assert f.signature_str == "fallback() returns()" |
||||
assert f.function_type == FunctionType.FALLBACK |
||||
assert f.contains_assembly is False |
||||
assert f.can_reenter() is False |
||||
assert f.can_send_eth() is False |
||||
assert f.is_constructor is False |
||||
assert f.is_fallback is True |
||||
assert f.is_receive is False |
||||
assert f.payable is False |
||||
assert f.visibility == "external" |
||||
assert f.view is False |
||||
assert f.pure is False |
||||
assert f.is_implemented is True |
||||
assert f.is_empty is True |
||||
assert f.parameters == [] |
||||
assert f.return_type is None |
||||
|
||||
f = functions["receive()"] |
||||
assert f.name == "receive" |
||||
assert f.full_name == "receive()" |
||||
assert f.canonical_name == "TestFunction.receive()" |
||||
assert f.solidity_signature == "receive()" |
||||
assert f.signature_str == "receive() returns()" |
||||
assert f.function_type == FunctionType.RECEIVE |
||||
assert f.contains_assembly is False |
||||
assert f.can_reenter() is False |
||||
assert f.can_send_eth() is False |
||||
assert f.is_constructor is False |
||||
assert f.is_fallback is False |
||||
assert f.is_receive is True |
||||
assert f.payable is True |
||||
assert f.visibility == "external" |
||||
assert f.view is False |
||||
assert f.pure is False |
||||
assert f.is_implemented is True |
||||
assert f.is_empty is True |
||||
assert f.parameters == [] |
||||
assert f.return_type is None |
||||
|
||||
f = functions["constructor(address)"] |
||||
assert f.name == "constructor" |
||||
assert f.full_name == "constructor(address)" |
||||
assert f.canonical_name == "TestFunction.constructor(address)" |
||||
assert f.solidity_signature == "constructor(address)" |
||||
assert f.signature_str == "constructor(address) returns()" |
||||
assert f.function_type == FunctionType.CONSTRUCTOR |
||||
assert f.contains_assembly is False |
||||
assert f.can_reenter() is False |
||||
assert f.can_send_eth() is False |
||||
assert f.is_constructor |
||||
assert f.is_fallback is False |
||||
assert f.is_receive is False |
||||
assert f.payable is True |
||||
assert f.visibility == "public" |
||||
assert f.view is False |
||||
assert f.pure is False |
||||
assert f.is_implemented is True |
||||
assert f.is_empty is True |
||||
assert f.parameters[0].name == "_e" |
||||
assert f.parameters[0].type == ElementaryType("address") |
||||
assert f.return_type is None |
||||
|
||||
f = functions["private_view()"] |
||||
assert f.name == "private_view" |
||||
assert f.full_name == "private_view()" |
||||
assert f.canonical_name == "TestFunction.private_view()" |
||||
assert f.solidity_signature == "private_view()" |
||||
assert f.signature_str == "private_view() returns(bool)" |
||||
assert f.function_type == FunctionType.NORMAL |
||||
assert f.contains_assembly is False |
||||
assert f.can_reenter() is False |
||||
assert f.can_send_eth() is False |
||||
assert f.is_constructor is False |
||||
assert f.is_fallback is False |
||||
assert f.is_receive is False |
||||
assert f.payable is False |
||||
assert f.visibility == "private" |
||||
assert f.view is True |
||||
assert f.pure is False |
||||
assert f.is_implemented is True |
||||
assert f.is_empty is False |
||||
assert f.parameters == [] |
||||
assert f.return_type[0] == ElementaryType("bool") |
||||
|
||||
f = functions["public_pure()"] |
||||
assert f.name == "public_pure" |
||||
assert f.full_name == "public_pure()" |
||||
assert f.canonical_name == "TestFunction.public_pure()" |
||||
assert f.solidity_signature == "public_pure()" |
||||
assert f.signature_str == "public_pure() returns(bool)" |
||||
assert f.function_type == FunctionType.NORMAL |
||||
assert f.contains_assembly is False |
||||
assert f.can_reenter() is False |
||||
assert f.can_send_eth() is False |
||||
assert f.is_constructor is False |
||||
assert f.is_fallback is False |
||||
assert f.is_receive is False |
||||
assert f.payable is False |
||||
assert f.visibility == "public" |
||||
assert f.view is True |
||||
assert f.pure is True |
||||
assert f.is_implemented is True |
||||
assert f.is_empty is False |
||||
assert f.parameters == [] |
||||
assert f.return_type[0] == ElementaryType("bool") |
||||
|
||||
|
||||
def test_function_can_send_eth(): |
||||
slither = Slither("tests/test_function.sol") |
||||
functions = slither.contracts_as_dict["TestFunctionCanSendEth"].available_functions_as_dict() |
||||
|
||||
assert functions["send_direct()"].can_send_eth() is True |
||||
assert functions["transfer_direct()"].can_send_eth() is True |
||||
assert functions["call_direct()"].can_send_eth() is True |
||||
assert functions["highlevel_call_direct()"].can_send_eth() is True |
||||
|
||||
assert functions["send_via_internal()"].can_send_eth() is True |
||||
assert functions["transfer_via_internal()"].can_send_eth() is True |
||||
assert functions["call_via_internal()"].can_send_eth() is True |
||||
assert functions["highlevel_call_via_internal()"].can_send_eth() is True |
||||
|
||||
assert functions["send_via_external()"].can_send_eth() is False |
||||
assert functions["transfer_via_external()"].can_send_eth() is False |
||||
assert functions["call_via_external()"].can_send_eth() is False |
||||
assert functions["highlevel_call_via_external()"].can_send_eth() is False |
||||
@ -0,0 +1,129 @@ |
||||
pragma solidity ^0.6.12; |
||||
|
||||
// solidity source used by tests/test_function.py. |
||||
// tests/test_function.py tests that the functions below get translated into correct |
||||
// `slither.core.declarations.Function` objects or its subclasses |
||||
// and that these objects behave correctly. |
||||
|
||||
contract TestFunction { |
||||
bool entered = false; |
||||
|
||||
function external_payable(uint _a) external payable returns (uint) { |
||||
return 1; |
||||
} |
||||
|
||||
function public_reenter() public { |
||||
msg.sender.call(""); |
||||
} |
||||
|
||||
function public_payable_reenter_send(bool _b) public payable { |
||||
msg.sender.call{value: 1}(""); |
||||
} |
||||
|
||||
function external_send(uint8 _c) external { |
||||
require(!entered); |
||||
entered = true; |
||||
msg.sender.call{value: 1}(""); |
||||
} |
||||
|
||||
function internal_assembly(bytes calldata _d) internal returns (uint) { |
||||
uint256 chain; |
||||
assembly { |
||||
chain := chainid() |
||||
} |
||||
return chain; |
||||
} |
||||
|
||||
fallback() external { |
||||
|
||||
} |
||||
|
||||
receive() external payable { |
||||
|
||||
} |
||||
|
||||
constructor(address payable _e) public payable { |
||||
|
||||
} |
||||
|
||||
function private_view() private view returns (bool) { |
||||
return entered; |
||||
} |
||||
|
||||
function public_pure() public pure returns (bool) { |
||||
return true; |
||||
} |
||||
} |
||||
|
||||
contract TestFunctionCanSendEth { |
||||
|
||||
function send_direct() internal { |
||||
address(1).send(1); |
||||
} |
||||
|
||||
function transfer_direct() internal { |
||||
address(1).transfer(1); |
||||
} |
||||
|
||||
function call_direct() internal { |
||||
address(1).call{value: 1}(""); |
||||
} |
||||
|
||||
function highlevel_call_direct() internal { |
||||
TestFunctionCanSendEthOther(address(5)).i_am_payable{value: 1}(); |
||||
} |
||||
|
||||
function send_via_internal() public { |
||||
send_direct(); |
||||
} |
||||
|
||||
function transfer_via_internal() public { |
||||
transfer_direct(); |
||||
} |
||||
|
||||
function call_via_internal() public { |
||||
call_direct(); |
||||
} |
||||
|
||||
function highlevel_call_via_internal() public { |
||||
highlevel_call_direct(); |
||||
} |
||||
|
||||
function send_via_external() public { |
||||
TestFunctionCanSendEthOther(address(5)).send_direct(); |
||||
} |
||||
|
||||
function transfer_via_external() public { |
||||
TestFunctionCanSendEthOther(address(5)).transfer_direct(); |
||||
} |
||||
|
||||
function call_via_external() public { |
||||
TestFunctionCanSendEthOther(address(5)).call_direct(); |
||||
} |
||||
|
||||
function highlevel_call_via_external() public { |
||||
TestFunctionCanSendEthOther(address(5)).highlevel_call_direct(); |
||||
} |
||||
} |
||||
|
||||
contract TestFunctionCanSendEthOther { |
||||
function i_am_payable() external payable { |
||||
|
||||
} |
||||
|
||||
function send_direct() external { |
||||
address(1).send(1); |
||||
} |
||||
|
||||
function transfer_direct() external { |
||||
address(1).transfer(1); |
||||
} |
||||
|
||||
function call_direct() external { |
||||
address(1).call{value: 1}(""); |
||||
} |
||||
|
||||
function highlevel_call_direct() external { |
||||
TestFunctionCanSendEthOther(address(5)).i_am_payable{value: 1}(); |
||||
} |
||||
} |
||||
@ -0,0 +1,45 @@ |
||||
# Slither Trophies |
||||
|
||||
The following lists security vulnerabilities that were found by Slither. |
||||
If you found a security vulnerability using Slither, |
||||
please submit a PR with the relevant information. |
||||
|
||||
| Project | Vulnerability | Date | |
||||
|--|--|--| |
||||
[Parity](https://github.com/trailofbits/publications/blob/master/reviews/parity.pdf) | Incorrect constructor name | July 2018 |
||||
[Parity](https://github.com/trailofbits/publications/blob/master/reviews/parity.pdf) | Deletion of a mapping with structure | July 2018 |
||||
[Parity](https://github.com/trailofbits/publications/blob/master/reviews/parity.pdf) | Uninitialized state variables | July 2018 |
||||
[Basis](https://github.com/trailofbits/publications/blob/master/reviews/basis.pdf) | Missing return value check | Oct 2018 |
||||
[Origin protocol](https://github.com/trailofbits/publications/blob/master/reviews/origin.pdf) | Reentrancy | Nov 2018 |
||||
[Numerai](https://github.com/trailofbits/publications/blob/master/reviews/numerai.pdf) | Deletion of a mapping with structure | Jul 2019 |
||||
[Numerai](https://github.com/trailofbits/publications/blob/master/reviews/numerai.pdf) | Missing return value | Jul 2019 |
||||
[Flexa](https://github.com/trailofbits/publications/blob/master/reviews/Flexa.pdf) | Reentrancy (events out of order) | Sep 2019 |
||||
[0x](https://github.com/trailofbits/publications/blob/master/reviews/0x-protocol.pdf) | Missing return value | Oct 2019 |
||||
[Token mint](https://certificate.quantstamp.com/full/token-mint) | Reentrancies | Dec 2019 |
||||
[Airswap](https://certificate.quantstamp.com/full/airswap) | Missing return value check | Feb 2020 |
||||
[Stake Technologies Lockdrop](https://certificate.quantstamp.com/full/stake-technologies-lockdrop) | Dangerous strict equality | Mar 2020 |
||||
[E&Y’s Nightfall](https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/) | Missing return value | May 2020 |
||||
[E&Y’s Nightfall](https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/) | Empty return value | May 2020 |
||||
[DefiStrategies](https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/) | Modifier can return the default value | May 2020 |
||||
[DefiStrategies](https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/) | Dangerous strict equality allows the contract to be trapped | May 2020 |
||||
[DOSnetwork](https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/) | Abi `encodedPacked` collision | May 2020 |
||||
[EthKids](https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/) | `msg.value` is used two times to compute a price | May 2020 |
||||
[HQ20](https://blog.trailofbits.com/2020/05/15/bug-hunting-with-crytic/) | Reentrancy | May 2020 |
||||
[Dloop](https://certificate.quantstamp.com/full/dloop-art-registry-smart-contract) | Dangerous `block.timestamp` usage | Jun 2020 |
||||
[Atomic Loans](https://certificate.quantstamp.com/full/atomic-loans) | Uninitialized state variable | Jul 2020 |
||||
[Atomic Loans](https://certificate.quantstamp.com/full/atomic-loans) | State variable shadowing | Jul 2020 |
||||
[Atomic Loans](https://certificate.quantstamp.com/full/atomic-loans) | Reentrancy | Jul 2020 |
||||
[Amp](https://github.com/trailofbits/publications/blob/master/reviews/amp.pdf) | Duplicate contract name | Aug 2020 |
||||
[PerlinXRewards](https://certificate.quantstamp.com/full/perlin-x-rewards-sol) | Multiple reentrancies | Aug 2020 |
||||
[Linkswap](https://certificate.quantstamp.com/full/linkswap) | Lack of return value check | Nov 2020 |
||||
[Linkswap](https://certificate.quantstamp.com/full/linkswap) | Uninitialized state variable | Nov 2020 |
||||
[Cryptex](https://certificate.quantstamp.com/full/cryptex) | Lack of return value check | Nov 2020 |
||||
[Hermez](https://github.com/trailofbits/publications/blob/master/reviews/hermez.pdf) | Reentrancy | Nov 2020 |
||||
[Unoswap](https://www.unos.finance/wp-content/uploads/2020/11/block-audit.pdf) | Contract locking ethers | Nov 2020 |
||||
[Idle](https://certificate.quantstamp.com/full/idle-finance) | Dangerous divide before multiply operations | Dec 2020 |
||||
[RariCapital](https://certificate.quantstamp.com/full/rari-capital) | Lack of return value check | Dec 2020 |
||||
[RariCapital](https://certificate.quantstamp.com/full/rari-capital) | Uninitialized state variable | Dec 2020 |
||||
[wfil-factory](https://github.com/wfil/wfil-factory/commit/a43c1ddf52cf1191ccf1e71a637df02d78b98cc0) | Reentrancy | Dec 2020 |
||||
[Origin Dollar](https://github.com/trailofbits/publications/blob/master/reviews/OriginDollar.pdf) | Reentrancy | Jan 2021 |
||||
[Origin Dollar](https://github.com/trailofbits/publications/blob/master/reviews/OriginDollar.pdf) | Variable shadowing | Jan 2021 |
||||
[OriginTrait](https://github.com/OriginTrail/starfleet-boarding-contract/commit/6481b12abc3cfd0d782abd0e32eabd103d8f6953) | Reentrancy | Jan 2021 |
||||
Loading…
Reference in new issue