sentri-analyzer-evm 0.3.0

Sentri: EVM smart contract analyzer with static analysis and invariant checking for Ethereum, Polygon, and other EVM chains.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76

//! AST-based vulnerability detectors for EVM smart contracts.
//!
//! Each detector implements analysis for a specific vulnerability pattern.
//!
//! Phase A (Critical): 5 high-impact invariants
//! - evm_missing_post_state_health_check (H19 Euler - $197M)
//! - evm_merkle_root_zero_default (H16 Nomad - $190M)
//! - evm_dvn_single_point_failure (H47 KelpDAO - $292M)
//! - evm_unbacked_synthetic_mint (H56 Echo - $73M)
//! - evm_lst_depeg_collateral_risk (H47 KelpDAO - $292M)
//!
//! Phase B (High-Priority): 8 additional invariants
//! - evm_oracle_self_trade (H17 Mango - $117M)
//! - evm_synthetic_collateral_oracle (H45 Rhea, H40 Makina)
//! - evm_erc4626_inflation_protection (Theoretical)
//! - evm_arbitrary_call_msg_value (H26 Unizen - $2.1M)
//! - evm_reentrancy_via_whitelisted (H29 Penpie - $27M)
//! - evm_proxy_storage_collision (H28 Pike - $1.68M)
//! - evm_bridge_address_cryptographic_verify (H49 Purrlend)
//! - More...

pub mod aa_entropy_weakness;
// DEPRECATED: Old detector using legacy Violation struct, disabled for v0.3.0
// pub mod access_control;
pub mod arbitrary_call_msg_value;
pub mod arithmetic_rounding;
pub mod bridge_address_cryptographic_verify;
pub mod constructor_race_condition;
pub mod dvn_single_point;
pub mod erc4626_inflation_protection;
// DEPRECATED: Old detector using legacy Violation struct, disabled for v0.3.0
// pub mod flash_loan;
pub mod health_check;
pub mod implementations;
pub mod lst_depeg;
pub mod merkle_root;
pub mod oracle_self_trade;
// DEPRECATED: Old detector using legacy Violation struct, disabled for v0.3.0
// pub mod overflow;
pub mod proxy_storage_collision;
// DEPRECATED: Old detector using legacy Violation struct, disabled for v0.3.0
// pub mod reentrancy;
pub mod reentrancy_via_whitelisted;
pub mod router_slippage_validation;
pub mod signature_replay_protection;
pub mod state_mutation_ordering;
pub mod synthetic_collateral_oracle;
pub mod synthetic_mint;
pub mod token_balance_manipulation;
pub mod upgrade_path_verification;

pub use aa_entropy_weakness::detect_aa_entropy_weakness;
// pub use access_control::AccessControlDetector;
pub use arbitrary_call_msg_value::detect_arbitrary_call_msg_value;
pub use arithmetic_rounding::detect_arithmetic_rounding;
pub use bridge_address_cryptographic_verify::detect_bridge_address_cryptographic_verify;
pub use constructor_race_condition::detect_constructor_race_condition;
pub use dvn_single_point::detect_dvn_single_point_failure;
pub use erc4626_inflation_protection::detect_erc4626_inflation_protection;
// pub use flash_loan::FlashLoanDetector;
pub use health_check::detect_missing_health_check;
pub use implementations::*;
pub use lst_depeg::detect_lst_depeg_collateral_risk;
pub use merkle_root::detect_merkle_root_zero_default;
pub use oracle_self_trade::detect_oracle_self_trade;
// pub use overflow::OverflowDetector;
pub use proxy_storage_collision::detect_proxy_storage_collision;
// pub use reentrancy::ReentrancyDetector;
pub use reentrancy_via_whitelisted::detect_reentrancy_via_whitelisted;
pub use router_slippage_validation::detect_router_slippage_validation;
pub use signature_replay_protection::detect_signature_replay_protection;
pub use state_mutation_ordering::detect_state_mutation_ordering;
pub use synthetic_collateral_oracle::detect_synthetic_collateral_oracle;
pub use synthetic_mint::detect_unbacked_synthetic_mint;
pub use token_balance_manipulation::detect_token_balance_manipulation;
pub use upgrade_path_verification::detect_upgrade_path_verification;