A static analysis plugin with filecoin integration vulnerability detectors. Plugin uses Slither engine. We analyzed filecoin-solidity to get ideas for the detector.
- Docs - vulnerability and detector descriptions, recommendations on fixes.
- Detectors - detectors code.
- Tests - smart contracts with cases where the detector should and should not work.
- Install the original Slither.
- In the current repo, run
npm install
andsudo python3 setup.py develop
(on Linux).
After the installation, detectors are included in the original Slither. Run Slither as usual.
To run the demo detector, type in terminal slither ./pathToFile --detect "fc-direct-precompile"