wndcontracts
DISCONTINUED
slither
Our great sponsors
wndcontracts | slither | |
---|---|---|
1 | 13 | |
13 | 2,898 | |
- | 10.0% | |
5.9 | 9.0 | |
8 months ago | 2 days ago | |
Solidity | Python | |
- | GNU Affero General Public License v3.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
wndcontracts
-
An unofficial audit of a Solidity Game smart contract: Wizards & Dragons Game
The team behind the game has provided an updated version of the contracts on their GitHub repository. Still no specification, documentation or tests are added.
slither
-
A Comprehensive Guide on Web3 Programming Languages and Tools
Sliter is a static smart contract security analytic tool built on Python to detect vulnerabilities, enhance code comprehension, and prototype custom analyses.
-
Tools to verify solidity code
Smart Contract Weakness Classification and Test Cases: https://swcregistry.io/ OKO Contract Explorer: https://oko.palkeo.com/txview Slither: https://github.com/crytic/slither MythX: https://mythx.io/ Tenderly: https://tenderly.dev/ Spot check program: https://docs.google.com/document/d/16...
Static analysis: Slither
-
Any recommendations for smart contract auditing ?
As software you can try https://github.com/crytic/slither or a full package https://github.com/trailofbits/eth-security-toolbox
- Slither – Solidity Source Analyzer
-
DEV update: threat reporting and other UI improvements
Added reference to threat provider. Currently we support: a) Slither: it's a static code analysis framework that scans contract code and reports detected vulnerabilities b) LSR: obviously we are the main threat author on our service; we analyze state of social accounts, different suspicious patterns in contract code, social activity, metadata and so on. c) CoinMarketCap, CoinGecko, CoinAlpha, CoinHunt, Nomics: these are the platforms that may list a coin; if coin is not listed anywhere (especially for a long time) - it's a sure sign of fraud or untrustworthy token
-
DEV update: Laser Desk BETA release - UI changes
Our Laser Score is calculated from multiple factors. We've grouped them in 3 dimensions and presented 3 additional scores so that you can better understand why Laser Score is low or high. Dimensions include: a) Maturity: size, age, reputation of a project. Tokens that are old, respected, well-known, have high market capitalization and trading volume get high Maturity Score. Tokens that are new, have no website / audit / white paper and are not trustworthy get low Maturity Score. b) Community: awareness, popularity, loyalty. Tokens that are listed on multiple platforms (CoinMartketCap, CoinGecko, Nomics, etc.) and have active social accounts with multiple users get high Community Score. Tokens that have no listings and no social accounts get low Community Score. c) Contract: quality of the code As before we audit contract code quality based on Slither framework and compute corresponding Contract Score. Tokens that have good code quality get high Contract Score. Tokens that have major and serious vulnerabilities get low Contract Score.
-
An unofficial audit of a Solidity Game smart contract: Wizards & Dragons Game
If you want to know more about this tool you should check it on GitHub: Slither.
- Smart Contract Security for Pentesters
- Slither 0.7.1 is out - it contains detectors improvements and several bugfixes
What are some alternatives?
solc-select - Manage and switch between Solidity compiler versions
echidna - Ethereum smart contract fuzzer
manticore - Symbolic execution tool
chai - BDD / TDD assertion framework for node.js and the browser that can be paired with any testing framework.
publications - Publications from Trail of Bits
create-smart-contract - Set up Ethereum smart contract development environment with one command
eth-security-toolbox - A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.
building-secure-contracts - Guidelines and training material to write secure smart contracts
mythril - Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Hedera, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
mocha - ☕️ simple, flexible, fun javascript test framework for node.js & the browser