saint-graves/sica-fondt
1
0
Fork 0
mirror of https://github.com/SHOGGOTH-SECTOR/sica-fondt.git synced 2026-08-01 08:30:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
sica-fondt/knowledge/cyber-skills/skills/analyzing-ethereum-smart-contract-vulnerabilities/references/api-reference.md
Claude 24f816b6a3
Consolidate 22 sibling repos into layered organism structure 
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):

- brain/        LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
                dispatch, A51 channels, and the OSINT cluster
- knowledge/    LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
                MITRE ATT&CK data
- reference/    defensive threat-reference (C3, shhbruh doc) + AdaYaml parser

License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.

Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.

https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
2026-06-10 06:53:01 +00:00

2.6 KiB
Raw Blame History

API Reference: Analyzing Ethereum Smart Contract Vulnerabilities

Slither CLI

# Basic analysis
slither contracts/

# JSON output
slither contracts/ --json slither-report.json

# Run specific detector only
slither contracts/ --detect reentrancy-eth,unprotected-upgrade

# List all detectors
slither --list-detectors

# Print contract summary
slither contracts/ --print human-summary

# Generate inheritance graph
slither contracts/ --print inheritance-graph

Mythril CLI

# Analyze single contract
myth analyze contracts/Token.sol

# JSON output
myth analyze contracts/Token.sol -o json

# Set execution timeout
myth analyze contracts/Token.sol --execution-timeout 300

# Analyze deployed bytecode
myth analyze --address 0x1234... --rpc infura

# Increase analysis depth
myth analyze contracts/Token.sol --max-depth 50 --transaction-count 3

Slither Detector Severity Levels

Impact Confidence Example Detectors
High High reentrancy-eth, suicidal, arbitrary-send-eth
High Medium controlled-delegatecall, reentrancy-no-eth
Medium High locked-ether, incorrect-equality
Medium Medium uninitialized-state, shadowing-state
Low High naming-convention, solc-version
Informational High pragma, dead-code

SWC Registry (Key Entries)

SWC ID Title Tool Coverage
SWC-101 Integer Overflow/Underflow Mythril
SWC-104 Unchecked Call Return Slither + Mythril
SWC-106 Unprotected SELFDESTRUCT Slither + Mythril
SWC-107 Reentrancy Slither + Mythril
SWC-110 Assert Violation Mythril
SWC-112 Delegatecall to Untrusted Callee Slither
SWC-115 tx.origin Authentication Slither
SWC-116 Block Timestamp Dependence Mythril
SWC-120 Weak Randomness Slither

Installation

# Slither (requires solc)
pip install slither-analyzer
solc-select install 0.8.20
solc-select use 0.8.20

# Mythril
pip install mythril

Slither JSON Output Structure

{
  "success": true,
  "results": {
    "detectors": [{
      "check": "reentrancy-eth",
      "impact": "High",
      "confidence": "Medium",
      "description": "Reentrancy in Contract.withdraw()",
      "elements": [{"source_mapping": {"filename_short": "Contract.sol", "lines": [42, 43]}}]
    }]
  }
}

References