This release supports Hardhat v3 and Sourcify, it contains performance improvements and a reduction of false positives for some detectors. What's Changed feat: add performance benchmark script by @dguido in #2933 perf: optimize transitive closure with worklist algorithm (17-27% faster) by @dguido in #2932 perf: use set for O(1) membership in _explore_functions by @dguido in #2924 perf: cache deriv…
This minor release upgrades the minimum Python version to 3.10, adds one new detector reentrancy-balance and various other fixes. What's Changed Fix markdown lint on docs/ by @dguido in #2870 slither-doctor: paths: follow symlinks by @elopez in #1608 fixed consistency by @shushaaniik in #2556 Add paths to inheritance printer by @shargon in #2732 chore: fix typos by @omahs in #2723 fix: update snap…
This release adds support for the CLZ EVM opcode, for solidity custom storage layout, adds 1 new detector unindexed-event-address and various fixes. Additionally it changes the development environment to using uv and ruff for linting. What's Changed Update FUNDING.json by @bsamuels453 in #2713 FIxed typo of solidity and conditions by @sidarth16 in #2751 docs: fix typos by @Ahjan1999 in #2726 chore…
This minor release updates some dependencies. What's Changed Update web3, eth-* dependencies by @elopez in #2710 Full Changelog: 0.11.2...0.11.3
This minor release fixes a bug in the storage pointer analysis. What's Changed Fix written variables in storage pointer analysis by @smonicas in #2707 Full Changelog: 0.11.1...0.11.2
This release improves the support of unicode character where previously it would have resulted in erroneous source mapping for tools such as slither-flat and slither-mutate, adds function calls stack information to simplify the understanding of the output for certain detectors (calls-loop, costly-loop, delegatecall-loop, msg-value-loop) and other bug fixes. What's Changed Fix order yul parsing ide…
This release adds support for the latest Solidity features like using a custom error in a require statement and transient storage, adds 7 new detectors, 2 new printers and various other improvements. NOTE: There are breaking changes to some API in particular the variables properties in the Contract class (see #2588) and the *Calls API (see #2555). The new detectors are: pyth-deprecated-functions:…
This is a minor release that fixes some issues caused by updates to the web3.py library. Also, it contains fixes/improvements for a couple detectors: fix the solc-version detector which was warning on solc versions without bugs, don't report arbitrary-send-eth if the recipient if it's an immutable value, disable unused-import as it was slow and not handling a few edge cases correctly. Finally, sli…
This is a minor release that fixes several bugs, improves performance, and addresses some false positives. There is a new flag, --include-detectors, to override exclusion rules e.g. run a specific low severity detector while excluding others with --exclude-low. The detector, similar-names, has been removed. We would like to thank our external contributors: @careworry @xiaoxianBoy @vovikhangcdv @ut…
0.10.2 - 2024-04-08 This minor release contains several enhancements and resolves several bugs, most notably: Revamps slither-mutate with first class support for Foundry projects (see quickstart) New detector identifies unused imports (slither . --detect unused-import) Resolves longstanding issues in import resolution and lack of support for aliases (see #1452) Improves the reference/declaration A…
0.10.1 - 2024-02-29 This is a minor release that adds support for Solidity 0.8.24 and top level events. It includes a new detector, out-of-order-retryable, which detects potential misuse of Arbitrum's retryable transactions. Also, there is a new CLI flag, --include-paths which allows one to only include results from a given path. We would like to thank all of our external contributors: @vielite @m…