637 matches found
slither
Slither, 스마트 계약 정적 분석기 Empire Hacking Slack에 참여하세요 - 토론 및 지원 Slither 는 Python3로 작성된 Solidity 및 Vyper 정적 분석 프레임워크입니다. 취약점 탐지기 모음을 실행하고, 계약 세부 정보에 대한 시각적 정보를 출력하며, 사용자 정의 분석을 쉽게 작성할 수 있는 API를 제공합니다. Slither는 개발자가 취약점을 찾고, 코드 이해도를 높이며, 사용자 정의 분석을 신속하게 프로토타입화할 수 있도록 합니다. 특징 사용법 설치 방법 uv 사용 권장 Pip 사용...
Vyper's `slice()` may elide side-effects when output length is 0
Impactthe slice builtin can elide side effects when the output length is 0, and the source bytestring is a builtin msg.data or .code. the reason is that for these source locations, the check that length = 1 is...
PYSEC-2026-2029 Vyper's `concat()` builtin may elide side-effects for zero-length arguments
Impact concat may skip evaluation of side effects when the length of an argument is zero. this is due to a fastpath in the implementation which skips evaluation of argument expressions when their length is zero:...
PYSEC-2026-2028 Vyper's `slice()` may elide side-effects when output length is 0
Impact the slice builtin can elide side effects when the output length is 0, and the source bytestring is a builtin msg.data or .code. the reason is that for these source locations, the check that length = 1 is skipped:...
Vyper's `concat()` builtin may elide side-effects for zero-length arguments
Impactconcat may skip evaluation of side effects when the length of an argument is zero. this is due to a fastpath in the implementation which skips evaluation of argument expressions when their length is...
SmartContract-VulnHunter
🛡️ SmartContract VulnHunter The ultimate smart contract securi...
CVE-2023-40015
Vyper is a Pythonic Smart Contract Language. For the following probably non-exhaustive list of expressions, the compiler evaluates the arguments from right to left instead of left to right. unsafeadd, unsafesub, unsafemul, unsafediv, powmod256, |, &, ^ bitwise operators, bitwiseor deprecated,...
CVE-2023-31146
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, during codegen, the length word of a dynarray is written before the data, which can result in out-of-bounds array access in the case where the dynarray is on both the lhs and rhs of an assignment...
CVE-2021-41121
Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when performing a function call inside a literal struct, there is a memory corruption issue that occurs because of an incorrect pointer to the the top of the stack. This issue has been resolved in version 0.3.0...
EUVD-2021-0460
Malware in sbrugna...
EUVD-2021-0459
Malware in sbrugna...
EUVD-2025-4282
Malicious code in bioql PyPI...
EUVD-2023-0265
Malicious code in bioql PyPI...
EUVD-2023-0264
Malicious code in bioql PyPI...
EUVD-2025-15445
Malicious code in bioql PyPI...
EUVD-2023-0268
Malicious code in bioql PyPI...
EUVD-2023-0266
Malicious code in bioql PyPI...
EUVD-2024-40254
Malicious code in bioql PyPI...