Slither Analysis

pip3 install slither-analyzer
# or
pipx install slither-analyzer

# Verify
slither --version

# Basic analysis
slither .

# Target specific contract
slither src/MyContract.sol

# JSON output for CI
slither . --json slither-report.json

# Specific detectors only
slither . --detect reentrancy-eth,reentrancy-no-eth,uninitialized-state

# Exclude detectors
slither . --exclude naming-convention,pragma

# With Foundry remappings
slither . --foundry-out-directory out

{
  "filter_paths": [
    "lib/",
    "test/",
    "script/",
    "node_modules/"
  ],
  "exclude_informational": true,
  "exclude_low": false,
  "exclude_optimization": true,
  "detectors_to_exclude": [
    "naming-convention",
    "pragma",
    "solc-version"
  ]
}

// slither-disable-next-line reentrancy-benign
token.transfer(to, amount);

# Check proxy/implementation compatibility
slither-check-upgradeability . MyContractV1 --proxy-name ERC1967Proxy

# Compare storage layouts between versions
slither-check-upgradeability . MyContractV2 \
  --proxy-name ERC1967Proxy \
  --new-contract-name MyContractV2

# Check for storage collisions
slither . --detect storage-collision

# Function summary (visibility, modifiers, state changes)
slither . --print function-summary

# Contract inheritance graph
slither . --print inheritance-graph

# Call graph
slither . --print call-graph

# Storage layout
slither . --print variable-order

# Data dependency
slither . --print data-dependency

# Human-readable summary
slither . --print human-summary

name: Slither Analysis
on: [push, pull_request]

jobs:
  slither:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: recursive

      - name: Install Foundry
        uses: foundry-rs/foundry-toolchain@v1

      - name: Build
        run: forge build

      - name: Run Slither
        uses: crytic/slither-action@v0.4.0
        with:
          sarif: results.sarif
          fail-on: high
          slither-args: --filter-paths "lib/|test/|script/"

      - name: Upload SARIF
        uses: github/codeql-action/upload-sarif@v3
        if: always()
        with:
          sarif_file: results.sarif

// FINDING: reentrancy-eth
// FIX: checks-effects-interactions pattern
function withdraw(uint256 amount) external {
    require(balances[msg.sender] >= amount); // CHECK
    balances[msg.sender] -= amount;           // EFFECT
    (bool ok,) = msg.sender.call{value: amount}(""); // INTERACTION
    require(ok);
}

// FINDING: divide-before-multiply
// BAD: precision loss
uint256 result = a / b * c;

// FIX: multiply first
uint256 result = a * c / b;
// Or use FullMath / mulDiv for overflow safety

// FINDING: unchecked-transfer
// FIX: use SafeERC20
import {SafeERC20} from "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol";
using SafeERC20 for IERC20;
token.safeTransfer(to, amount);

# 1. Build first
forge build

# 2. Run slither with config
slither . --config slither.config.json

# 3. Generate report
slither . --json report.json --config slither.config.json

# 4. Check upgradeability (if using proxies)
slither-check-upgradeability . MyContract

# 5. Print function summary for review
slither . --print function-summary --filter-paths "lib/|test/"