3 ms·
Ugh, I have been advocating "Solidity--" for years and can't get funding to build it (Trail of Bits). We use two tools to offer quick turnaround automated test
by dguido 5y ago
Ugh, I have been advocating "Solidity--" for years and can't get funding to build it (Trail of Bits).
We use two tools to offer quick turnaround automated testing and verification for Solidity: Echidna (like QuickCheck for Solidity) and Manticore (a symbolic verifier). They each let you write high level properties in the span of 1-2 weeks that cover a large amount of potential use cases.
Here's an example of what that looks like:
https://github.com/trailofbits/publications/blob/master/reviews/Liquity.pdf https://github.com/trailofbits/publications/blob/master/revi...
Here's Echidna:
https://github.com/crytic/echidna https://github.com/crytic/echidna
and Manticore:
https://github.com/trailofbits/manticore https://github.com/trailofbits/manticore
Sometimes we also use custom static analyses built around Slither's IR during projects too:
https://github.com/crytic/slither/wiki/SlithIR https://github.com/crytic/slither/wiki/SlithIR