Slitherin

Latest version: v0.6.1

Safety actively analyzes 623704 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 2

0.6.1

Major Updates
Crucial Fixes
1. `pess-arb-solidity-version`: Removed detector. `PUSH0` opcode is now [supported](https://docs.arbitrum.io/for-devs/concepts/differences-between-arbitrum-ethereum/solidity-support) in ArbitrumOS. Thx **Yhtiyar**, **0xalpharush** and **0xEVom**.

Minor Updates and Optimization
Minor Fixes
1. Removed a redundant directory.

0.6.0

Major Updates
Reworks and additions
1. Slitherin Arbitrum: New Slitherin custom plugin (`--arbitrum`) which includes 3 Arbitrum-specific security detectors. Thx **Yhtiyar** and **olegggatttor**.
2. `pess-arb-solidity-version` detector: New Arbitrum-specific detector which spots usage of `block.number` and `block.timestamp`.
3. `pess-arb-prevrandao-difficulty` detector: New Arbitrum-specific detector which spots usage of prevRandao/difficulty.
4. `pess-arb-solidity-version` detector: New Arbitrum-specific detector which spots usage of solidity version `>= 0.8.20`.
5. `pess-potential-arithmetic-overflow` detector: New detector. The detector sees if there are assignments/returns that calculate some arithmetic expressions and if some intermediate calculations contain a type that is lower than the expected result. Thx **olegggatttor**.
6. `pess-aave-flashloan-callback` detector: Improvement. Now detector also spots the callback cases of Uniswap V3. Thx **Yhtiyar**.
7. Slitherin-benchmark. We created a benchmark with database of contracts on which we run our detectors and measure the FP rates. **Thx nikolay19**

Crucial Fixes
1. `pess-ecrecover` detector: Bug fix. Handles solidity types properly. Thx **olegggatttor**.
2. Slitherin CLI: Improvement. Now handles errors properly. Thx **Yhtiyar**.


Minor Updates and Optimization
Minor Fixes
1. `pess-strange-setter` detector. Optimization. Less FP. Thx **olegggatttor**.
2. `pess-unprotected-initialize` detector. Optimization. Less FP. Thx **olegggatttor**.
3. `pess-call-forward-to-protected` detector. Optimization. Less FP. Skips standard libraries (OZ/Uniswap/Balancer). Thx **olegggatttor**.
4. `pess-public-vs-external` detector. Optimization. Less FP. Skips `constructor` functions. Thx **olegggatttor**.

0.5.0

Major Updates
Reworks and additions
1. Slitherin CLI: Now, Slitherin and Slither detectors can be run separately. More information on CLI usage can be found [here](https://github.com/pessimistic-io/slitherin#slitherin-cli-recommended). Thx **Yhtiyar**
2. `pess-arbitrary-call` detector: Got divided into several detectors. Each detector has its own confidence and severity level. Descriptions of detectors can be found [here](https://github.com/pessimistic-io/slitherin/blob/master/docs/arbitrary_call.md). Thx **Yhtiyar**
3. `pess-aave-callback` detector: New detector. Checks if the callback executeOperation has initiator and msg.sender validation. Thx **Yhtiyar**

Crucial Fixes
1. `pess-only-eoa-check` detector: Had an IndexError in one of the cases, which has been fixed. Thx YanhuiJessica
2. `pess-arbitrary-call` detector: Had a bug in which the variable was read before declaration. This has now been fixed.


Minor Updates and Optimization
Minor Fixes
1. General. We changed the repo structure. Some files had paths to redundant files. Fixed. Thx Yhtiyar and YanhuiJessica

0.4.1

Major Updates
Includes some updates that we'll mention in the next release.
Crucial Fixes
1. Fixed the build of the Python package. Utils are now included and are used in detectors code.

0.4.0

Major Updates
Reworks and additions
1. `pess-uni-v2` detector: Now enabled by default. Launches checks when detects Uniswap V2 smart contracts inheritance. Thx **Yhtiyar**
2. `pess-public-vs-external` detector: New detector. Detects public functions that could be marked as external. Thx **Yhtiyar**
3. `pess-ecrecover` detector: New detector. Detects when error-result (0) of ecrecover function is not checked. Thx **Yhtiyar**
4. `pess-magic-number` detector: Now detects 3 or more values that are not assigned to variables. Thx **Yhtiyar**

Crucial Fixes
1. `pess-unprotected-setter` detector: Now handles functions with unnamed parameters.
2. `pess-call-forward-to-protected` detector: Now handles functions with unnamed parameters.
3. `pess-unprotected-initialize` detector: Now handles variable as Slither Variable.


Minor Updates and Optimization
Minor Fixes
1. `pess-arbitrary-call` detector: Now detects assembly calls and delegatecalls. Thx **Yhtiyar**
2. General. Removed unused imports and comments.
3. General. Notification to the Slitherin Telegram chat is sent with release (not with pushes to a master branch).
4. General. Updated README with Pessimistic.io link, ETH Belgrade talk and AuditWizard integration.

0.3.0

Major Updates
Reworks and additions
1. `pess-arbitrary-call` detector: New detector. Thx **Yhtiyar**

Crucial Fixes
1. `pess-strange-setter` detector: Functions with no parameters are no longer detected. Thx **Yhtiyar**


Minor Updates and Optimization
Minor Fixes
1. `pess-unprotected-setter` detector: Now has a separate test file.

Page 1 of 2

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.