Find Smart Contract Vulnerabilities with Slither

Slither is an easy to use security tool that finds potential security holes in your smart contracts. This video explains the basic usage of Slither.
#Slither #Security #SmartContract #Ethereum
Basic usage 1:05
Ignore previous warnings 3:14
Slither commands
github.com/t4s...
Example truffle project
github.com/t4s...
References
Slither
github.com/cry...
Follow on Twitter: @ProgrammerSmart / programmersmart
Join me on Discord: / discord
Website: smartcontractp...

[@smartcontractprogrammer]

Basic usage 1:05 Ignore previous warnings 3:14

[@abhisheksinha9027]

I started learning Slither just yesterday. Great to see you making videos on the same. Please also make videos on Echidna, mythril and writing fuzzers

[@smartcontractprogrammer]

Echidna - yes Mythril - maybe Symbolic execution tools are impractical to use on contracts that integrate with Defi :(

[@prabhasrockstar]

i got error installing slither in visulstudio code i got error PS C:\Users\subbaraju\Desktop\solidity-multi-sig-wallet-masters> pip3 install slither-analyzer pip3 : The term 'pip3' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:1 + pip3 install slither-analyzer + ~~~~ + CategoryInfo : ObjectNotFound: (pip3:String) [], CommandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException please help me

[@salem232]

💖 thanks a lot, awesome video !!! tagging it as handbook !!!

[@giskalia3629]

Sir, is another repo that we want to scan on slither must be clonned on same folder with slither folder?

[@abhii5521]

i tried to use but it says slither not recognized as cmdlet function. How to solve it.

[@ismailmoazami7586]

Great tutorial. how to use slither in brownie project?

[@luise6124]

Hi! Great video! Could you please make a detailed video with the installation process? So far, I've installed the Python package and the Solidity compiler, however the tool isn't working

[@smartcontractprogrammer]

What error are you getting?

[@luise6124]

@@smartcontractprogrammer It's a compiler version error. The solidity compiler version I've is 0.8.2, the contracts i've developed are 0.5.3. However, when trying to targeting a different compiler version using solc-selec tool, this step cannot be performed. I guess I should download previous versions of the solidity compiler, but there is no clear documentation on how to do that (or I least I didn't find it)

[@smartcontractprogrammer]

@@luise6124 You can easily switch solidity using docker See here for the command, right below the header "hello-smart-contract-security-tools " github.com/t4sk/hello-smart-contract-security-tools#hello-smart-contract-security-tools

[@luise6124]

@@smartcontractprogrammer Exactly, I ended up using the same container. However, the original idea was running slither locally but didn't work at all (even developing 0.8.2 smart contracts)

[@zes7215]

no such thing as diffic or not

[@GishStyle]

what keyboard do you use? sounds beautiful

[@smartcontractprogrammer]

Samsung laptop

[@bouncer2005]

Do you plan to do any more videos on blockchain security ?

[@smartcontractprogrammer]

property based testing

[@o.t.bharmonylimited1277]

can you please make detailed video on how to validate contract that is already out in binance or etherium

[@smartcontractprogrammer]

ok. easy.

[@o.t.bharmonylimited1277]

@@smartcontractprogrammer thankssssss 🤗

[@stebansb]

What are the differences between slither and mythril?

[@smartcontractprogrammer]

slither is a smaller tool than mythril

[@stebansb]

@@smartcontractprogrammer thank you, you mean it detects less vulnerabilities?

[@marcuskalman1606]

I havent been on slither for a while and i tried to use ' slither . ' but i get traceback error: crytic_compile.platform.exceptions.InvalidCompilation: [WinError 2] The system cannot find the file specified. Anyone know the fix?

[@abirdutta326]

After installation of slither when I write slither . in my vs code terminal it says slither is not recognised. Can anyone help me please

[@smartcontractprogrammer]

run it from a terminal. VS terminal may not know where slither is installed

[@abirdutta326]

@@smartcontractprogrammer hey I am trying to run slither using cmd in the specified path, but still got the same error, but when I run pip3 show slither, it sucessfully showing all the details of slither that is installed in my PC. Why I am getting this error again n again?

[@abirdutta326]

btw my slither is installled in AppData in C drive but my project location is in D drive

[@prabhasrockstar]

this is windows platform or ubantu

[@smartcontractprogrammer]

both. just need python

[@prabhasrockstar]

ok but u show the video which platform windows

[@software-sage]

You may need to install `solc` on your machine before running those commands. See install here: docs.soliditylang.org/en/v0.8.9/installing-solidity.html

[@0x0xxx08]

If you have a Hardhat or Truffle, Ganache just call slither from your project root folder. I didn't install solc and have success.

[@prabhasrockstar]

i got error installing slither in visulstudio code i got error PS C:\Users\subbaraju\Desktop\solidity-multi-sig-wallet-masters> pip3 install slither-analyzer pip3 : The term 'pip3' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:1 + pip3 install slither-analyzer + ~~~~ + CategoryInfo : ObjectNotFound: (pip3:String) [], CommandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException please help me

[@smartcontractprogrammer]

Install pip3 for Windows

[@prabhasrockstar]

@@smartcontractprogrammer how to install pip3 on windows

[@staminadaddy]

@@prabhasrockstar Google it

[@software-sage]

If you are using some external libraries like @openzeppelin, you can clear the errors slither gives you by using the following command: `slither --solc-remaps @openzeppelin=node_modules/@openzeppelin`