nowarp/misti

TON Static Analyzer

Misti

Misti is a static analysis tool designed for smart contracts on the TON blockchain.

Language Support

• Tact: 24 detectors are available
• FunC support is planned by the end of the year

Use Cases

• Detect Code Issues: Identify and fix potential security flaws and code problems early in the development cycle.
• Streamline Development: Integrate Misti into your CI/CD pipeline to ensure continuous code quality checks.
• Custom Detectors: Create custom detectors to solve specific problems in your code or to provide a thorough security review if you are an auditor.

Getting Started

1. Install Soufflé according to the official installation instruction.

2. Misti is distributed via npm and should be added to your Tact project in the same way as Tact itself:

yarn add @nowarp/misti

3. Run Misti by specifying a Tact project configuration:

npx misti path/to/your/tact.config.json

See Misti Configuration for available options, or Developing Misti for advanced instructions. Blueprint users should refer to the appropriate documentation page.

Resources

• Misti Documentation: Comprehensive guide on detectors, architecture, and development.
• Misti API Reference: Useful for contributors or developers creating custom detectors.
• Misti Blueprint Plugin: A plugin for the Blueprint Framework to enhance your workflow.
• Misti Discussion Group: Join the conversation.