oyente
oyente copied to clipboard
An Analysis Tool for Smart Contracts
Bumps [tzinfo](https://github.com/tzinfo/tzinfo) from 1.2.5 to 1.2.10. Release notes Sourced from tzinfo's releases. v1.2.10 Fixed a relative path traversal bug that could cause arbitrary files to be loaded with require when...
Running `python /oyente/oyente/oyente.py --compilation-error -s /home/test.txt -b` [test.txt](https://github.com/enzymefinance/oyente/files/7946039/test.txt) gives return value of 1 not 0, but result is valid: ``` WARNING:root:You are using evm version 1.8.2. The supported version is...
i have a number of different versions of smart contracts,and i want to use the oyente to detect them. but using solc-select to switch the solc version one by one...
Bugs
What are the bugs that are not identifies by oyente yet?
Consider the contracts - [`VeniceCityToken.sol`@main:0xaaf80137ddba52d009c45b047c0e6eb312e25ddb](https://etherscan.io/address/0xaaf80137ddba52d009c45b047c0e6eb312e25ddb#code) and - [`MetadollarCrw.sol`@main:0x0e32d4c9581ebffbdf5d920cc2252f379b88d562](https://etherscan.io/address/0x0e32d4c9581ebffbdf5d920cc2252f379b88d562#code). The runtime codes of these two contracts, on Solidity as well as on bytecode level, are identical except for two multiplicative constants...
Bumps [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) from 1.0.4 to 1.4.3. Release notes Sourced from rails-html-sanitizer's releases. 1.4.3 / 2022-06-09 Address a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer. Prevent the combination of select...
Bumps [shell-quote](https://github.com/substack/node-shell-quote) from 1.6.1 to 1.7.3. Release notes Sourced from shell-quote's releases. v1.7.2 Fix a regression introduced in 1.6.3. This reverts the Windows path quoting fix. (144e1c2) v1.7.1 Fix $...
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.8.2 to 1.13.6. Release notes Sourced from nokogiri's releases. 1.13.6 / 2022-05-08 Security [CRuby] Address CVE-2022-29181, improper handling of unexpected data types, related to untrusted inputs to...
Bumps [puma](https://github.com/puma/puma) from 3.11.4 to 4.3.12. Release notes Sourced from puma's releases. 4.3.12 Security Close several HTTP Request Smuggling exploits (CVE-2022-24790) 4.3.11 Bugfix/Security Response body will always be closed. (GHSA-rmj8-8hhh-gv5h,...
new version of [crytic-compile](https://github.com/crytic/crytic-compile) change something, resulting in errors in `_extract_bin_obj` of `input_helper.py`. Specified `crytic-compile` version in `setup.py` (0.1.8)