base64 VS slither

We use the base64.sol library to conduct base64 encode adapted from the Loot project. The original base64 library by Brecht Devos is: https://github.com/Brechtpd/base64 .

You could replace the code of the base64 function installing the original library and including it (like an external library as OpenZeppelin): https://github.com/Brechtpd/base64

Sliter is a static smart contract security analytic tool built on Python to detect vulnerabilities, enhance code comprehension, and prototype custom analyses.

Smart Contract Weakness Classification and Test Cases: https://swcregistry.io/ OKO Contract Explorer: https://oko.palkeo.com/txview Slither: https://github.com/crytic/slither MythX: https://mythx.io/ Tenderly: https://tenderly.dev/ Spot check program: https://docs.google.com/document/d/16...

Static analysis: Slither

As software you can try https://github.com/crytic/slither or a full package https://github.com/trailofbits/eth-security-toolbox

Added reference to threat provider. Currently we support: a) Slither: it's a static code analysis framework that scans contract code and reports detected vulnerabilities b) LSR: obviously we are the main threat author on our service; we analyze state of social accounts, different suspicious patterns in contract code, social activity, metadata and so on. c) CoinMarketCap, CoinGecko, CoinAlpha, CoinHunt, Nomics: these are the platforms that may list a coin; if coin is not listed anywhere (especially for a long time) - it's a sure sign of fraud or untrustworthy token

Our Laser Score is calculated from multiple factors. We've grouped them in 3 dimensions and presented 3 additional scores so that you can better understand why Laser Score is low or high. Dimensions include: a) Maturity: size, age, reputation of a project. Tokens that are old, respected, well-known, have high market capitalization and trading volume get high Maturity Score. Tokens that are new, have no website / audit / white paper and are not trustworthy get low Maturity Score. b) Community: awareness, popularity, loyalty. Tokens that are listed on multiple platforms (CoinMartketCap, CoinGecko, Nomics, etc.) and have active social accounts with multiple users get high Community Score. Tokens that have no listings and no social accounts get low Community Score. c) Contract: quality of the code As before we audit contract code quality based on Slither framework and compute corresponding Contract Score. Tokens that have good code quality get high Contract Score. Tokens that have major and serious vulnerabilities get low Contract Score.

If you want to know more about this tool you should check it on GitHub: Slither.