/semgrep-smart-contracts

Semgrep rules for smart contracts based on DeFi exploits

Primary LanguageSolidityOtherNOASSERTION

Semgrep rules for smart contracts

In this repository you can find semgrep rules that look for patterns of vulnerabilities in smart contracts based on actual DeFi exploits.

Disclaimer

Currently semgrep supports Solidity in experimental mode. Some of the rules may not work until Solidity is in beta at least.

Scanning

semgrep + smart-contract-sanctuary = ❤️

$ semgrep --config solidity/security ~/smart-contract-sanctuary-arbitrum/contracts/mainnet

Testing

Each rule is accompanied by an actual vulnerable source code that was targeted by an exploit. Vulnerable lines are marked with // ruleid: ...

In case a rule is not yet supported by semgrep, you will find // todoruleid: ...

Run tests:

$ semgrep --test solidity

Validate rules:

$ semgrep --validate --config solidity

Security Rules

Rule ID Targets Description
compound-borrowfresh-reentrancy Compound, Ola Finance, Hundred Finance, Agave Function borrowFresh() in Compound performs state update after doTransferOut()
compound-sweeptoken-not-restricted TUSD, Compound Function sweepToken is allowed to be called by anyone
erc20-public-transfer Creat Future Custom ERC20 implementation exposes _transfer() as public
erc20-public-burn HospoWise Anyone can burn tokens of other accounts
erc677-reentrancy Ola Finance ERC677 callAfterTransfer() reentrancy
erc777-reentrancy Bacon Protocol ERC777 tokensReceived() reentrancy
erc721-reentrancy Hype Bears ERC721 onERC721Received() reentrancy
erc721-arbitrary-transferfrom Distortion Genesis Custom ERC721 implementation lacks access control checks in _transfer()
gearbox-tokens-path-confusion Gearbox UniswapV3 adapter implemented incorrect extraction of path parameters
keeper-network-oracle-manipulation Inverse Finance Keep3rV2.current() call has high data freshness, but it has low security, an exploiter simply needs to manipulate 2 data points to be able to impact the feed.
basic-oracle-manipulation Onering Finance, Deus Finance getSharePrice() can be manipulated via flashloan
redacted-cartel-custom-approval-bug Redacted Cartel transferFrom() can steal allowance of other accounts
rigoblock-missing-access-control RigoBlock setMultipleAllowances() is missing onlyOwner modifier
oracle-price-update-not-restricted Rikkei Finance, Aave Oracle price data can be submitted by anyone
superfluid-ctx-injection Superfluid A specially crafted calldata may be used to impersonate other accounts
tecra-coin-burnfrom-bug Tecra Coin Parameter "from" is checked at incorrect position in "_allowances" mapping
arbitrary-low-level-call Auctus Options, Starstream Finance, BasketDAO, Li Finance An attacker may perform call() to an arbitrary address with controlled calldata
sense-missing-oracle-access-control Sense Finance Oracle update is not restricted in onSwap(), rule by Arbaz Kiraak
proxy-storage-collision Audius Proxy declares a state var that may override a storage slot of the implementation
uniswap-callback-not-protected Generic Uniswap callback is not protected
encode-packed-collision Generic Hash collision with variable length arguments in abi.encodePacked
openzeppelin-ecdsa-recover-malleable OpenZeppelin Potential signature malleability
BETA: basic-arithmetic-underflow Umbrella Network, Remittance Token Possible arithmetic underflow
unrestricted-transferownership Ragnarok Online Invasion Contract ownership can be transfered by anyone
msg-value-multicall Sushiswap Function with constant msg.value can be called multiple times
no-bidi-characters Generic The code must not contain any of Unicode Direction Control Characters
delegatecall-to-arbitrary-address Generic An attacker may perform delegatecall() to an arbitrary address.

Gas Optimization Rules

Rule ID Description
array-length-outside-loop Caching the array length outside a loop saves reading it on each iteration, as long as the array's length is not changed during the loop.
init-variables-with-default-value Explicitly initializing a variable with its default value costs unnecessary gas.
state-variable-read-in-a-loop Replace state variable reads and writes within loops with local variable reads and writes.
unnecessary-checked-arithmetic-in-loop A lot of times there is no risk that the loop counter can overflow. Using Solidity's unchecked block saves the overflow checks.
use-custom-error-not-require Consider using custom errors as they are more gas efficient while allowing developers to describe the error in detail using NatSpec.
use-multiple-require Using multiple require statements is cheaper than using && multiple check combinations.
use-nested-if Using nested is cheaper than using && multiple check combinations.
use-prefix-decrement-not-postfix The prefix decrement expression is cheaper in terms of gas.
use-prefix-increment-not-postfix The prefix increment expression is cheaper in terms of gas.
use-short-revert-string Shortening revert strings to fit in 32 bytes will decrease gas costs for deployment and gas costs when the revert condition has been met.