Semgrep Smart Contracts Versions Save

Semgrep rules for smart contracts based on DeFi exploits

v1.0.0

5 months ago

What's Changed

add argument types in function declarations by @Raz0r in https://github.com/Decurity/semgrep-smart-contracts/pull/3
Create sense-oracle-access-control.yml by @arbazkiraak in https://github.com/Decurity/semgrep-smart-contracts/pull/4
Added a reference to a relevant CTF challenge by @pi3ch in https://github.com/Decurity/semgrep-smart-contracts/pull/7
new rule: encode-packed-collision by @Raz0r in https://github.com/Decurity/semgrep-smart-contracts/pull/9
Adding a rule to detect the dangerous oz ecdsa usage by @beched in https://github.com/Decurity/semgrep-smart-contracts/pull/10
Unrestricted transferOwnership() added by @PassKeyRa in https://github.com/Decurity/semgrep-smart-contracts/pull/12
sense-missing-oracle-access-control: fix onSwap fp by @Raz0r in https://github.com/Decurity/semgrep-smart-contracts/pull/13
uniswap-callback-not-protected: fix fp by @Raz0r in https://github.com/Decurity/semgrep-smart-contracts/pull/14
unrestricted-transferownership: fix fp by @Raz0r in https://github.com/Decurity/semgrep-smart-contracts/pull/16
erc20-public-transfer: fix fp by @Raz0r in https://github.com/Decurity/semgrep-smart-contracts/pull/17
erc20-public-burn: fix fp by @Raz0r in https://github.com/Decurity/semgrep-smart-contracts/pull/18
new rule: msg-value-multicall by @Raz0r in https://github.com/Decurity/semgrep-smart-contracts/pull/11
add _msgSender() checks by @h1kk4 in https://github.com/Decurity/semgrep-smart-contracts/pull/19
- No bidi characters rule by @PassKeyRa in https://github.com/Decurity/semgrep-smart-contracts/pull/21
delegatecall to arbitrary address by @Frodan in https://github.com/Decurity/semgrep-smart-contracts/pull/26
add more cases + constant have to be initialized by @h1kk4 in https://github.com/Decurity/semgrep-smart-contracts/pull/24
added new gaz rules by @h1kk4 in https://github.com/Decurity/semgrep-smart-contracts/pull/27
delegatecall with gas param by @h1kk4 in https://github.com/Decurity/semgrep-smart-contracts/pull/28
Update README.md by @Raz0r in https://github.com/Decurity/semgrep-smart-contracts/pull/32
- new gas rules by @Frodan in https://github.com/Decurity/semgrep-smart-contracts/pull/30
state-variable-can-be-set-to-immutable rule by @Frodan in https://github.com/Decurity/semgrep-smart-contracts/pull/29
update readme, rm immutable vars rule & smol fixes by @Raz0r in https://github.com/Decurity/semgrep-smart-contracts/pull/33
storage variable length should be cached too by @h1kk4 in https://github.com/Decurity/semgrep-smart-contracts/pull/34
fix empty transferownership by @Raz0r in https://github.com/Decurity/semgrep-smart-contracts/pull/37
"Incorrect use of blockhash" rule by @Frodan in https://github.com/Decurity/semgrep-smart-contracts/pull/39
"Accessible selfdestruct" rule by @Frodan in https://github.com/Decurity/semgrep-smart-contracts/pull/36
fixed output + extended inheritance pattern by @h1kk4 in https://github.com/Decurity/semgrep-smart-contracts/pull/44
Uniswap: no slippage check rule added by @PassKeyRa in https://github.com/Decurity/semgrep-smart-contracts/pull/40
use-abi-encodecall-when-possible rule by @h1kk4 in https://github.com/Decurity/semgrep-smart-contracts/pull/47
Use Ownable2Step rather than Ownable by @h1kk4 in https://github.com/Decurity/semgrep-smart-contracts/pull/43
Balancer readonly reentrancy rules by @h1kk4 in https://github.com/Decurity/semgrep-smart-contracts/pull/48
rule to detect curve readonly reentrancy by @h1kk4 in https://github.com/Decurity/semgrep-smart-contracts/pull/49
check revert string length by @h1kk4 in https://github.com/Decurity/semgrep-smart-contracts/pull/50
plus-equal-cost-more-for-state-variables by @h1kk4 in https://github.com/Decurity/semgrep-smart-contracts/pull/51
fix metadata & add CI validation by @Raz0r in https://github.com/Decurity/semgrep-smart-contracts/pull/52
pair-public-transferFeesSupportingTaxTokens and rebase-order-bug by @KasimoNagasaki in https://github.com/Decurity/semgrep-smart-contracts/pull/53
Add rule add-redeemFresh-redeemAmount-unsafe-calculation by @KasimoNagasaki in https://github.com/Decurity/semgrep-smart-contracts/pull/54

New Contributors

@Raz0r made their first contribution in https://github.com/Decurity/semgrep-smart-contracts/pull/3
@arbazkiraak made their first contribution in https://github.com/Decurity/semgrep-smart-contracts/pull/4
@pi3ch made their first contribution in https://github.com/Decurity/semgrep-smart-contracts/pull/7
@beched made their first contribution in https://github.com/Decurity/semgrep-smart-contracts/pull/10
@PassKeyRa made their first contribution in https://github.com/Decurity/semgrep-smart-contracts/pull/12
@h1kk4 made their first contribution in https://github.com/Decurity/semgrep-smart-contracts/pull/19
@Frodan made their first contribution in https://github.com/Decurity/semgrep-smart-contracts/pull/26
@KasimoNagasaki made their first contribution in https://github.com/Decurity/semgrep-smart-contracts/pull/53

Full Changelog: https://github.com/Decurity/semgrep-smart-contracts/commits/v1.0