slither icon indicating copy to clipboard operation
slither copied to clipboard

Static Analyzer for Solidity and Vyper

Results 308 slither issues
Sort by recently updated
recently updated
newest added

The Echidna printer in Slither fails to detect some constants, for instance: ```solidity contract C { uint x = 1; } ``` won't be detected: ``` $ slither --print echidna...

echidna

The Echidna printer in Slither fails to detect the correct type of number constants, for instance: ```solidity contract C { function f(int x) public returns (bool) { if (x ==...

echidna

With a checklist - Clear description of the issue - Best practices followed, including - Each issue should have its own result - How to use `contracts_derived` - ... -...

enhancement
High Priority

### Describe the issue: I have the following contract code below, that use bit shifts to create a mask that can be used to compare if part of a `byte32`...

bug-candidate

### Describe the issue: ENV : HARDHAT Traceback (most recent call last): File "/home/nba-179-41a/.local/lib/python3.8/site-packages/slither/__main__.py", line 741, in main_impl ) = process_all(filename, args, detector_classes, printer_classes) File "/home/nba-179-41a/.local/lib/python3.8/site-packages/slither/__main__.py", line 83, in process_all...

bug-candidate

### Describe the issue: Not able to pipe or redirect output to a file ### Code example to reproduce the issue: ```slither . | tee output.file``` ```slither . > output.file```...

bug-candidate

Hello, I'm wondering if there is some other resources for the upgradability bugs? I could almost find nothing by searching the keywords like "upgradeable smart contract vulnerability" but no related...

Trying to use Slither on Ubuntu LTS. The project is using Solidity 0.8.10, Node 14 and Python 3.9. We are facing the following issue: ``` Traceback (most recent call last):...

Need more info

### Describe the desired feature Reference is currently in the same color as the vulnerability reported. My go-to method of pointing out references to differentiate between errors currently is ⌘+F...

enhancement

### Describe the desired feature Consider the following code: ```js contract Rewards { mapping(address => uint88) internal userRewards; modifier onlyOwner() {} function updateUserRewards( address[] calldata _userWallets, uint88[] calldata _userRewards )...

enhancement