Slither

Slither is a static analysis framework for Solidity. It runs a suite of vulnerability detectors and provides information about contract details.

前提条件

To use Slither analysis with Remix IDE efficiently, the following tools should be installed locally on your system:

  1. Slither: Installing Slither

  2. Solc: Installing Solidity

  3. Solc-select: Solc Quickstart

使用方式

Slither analysis is available in Remix Desktop through the Solidity Static Analysis plugin and on Remix Web through RemixAI.

Remix Web

On Remix Web, Slither analysis is available through RemixAI. Open the RemixAI Assistant, describe your contract, and ask it to run a Slither analysis.

Here's an example prompt:

Run a Slither analysis on MyToken.sol and list any security vulnerabilities or warnings.

The Slither checkbox in the Solidity Static Analysis plugin will be greyed out on Remix Web.

Remix Desktop

If you load a local project in Remix Desktop, there will be an extra checkbox shown in Solidity Static Analysis plugin with the label Slither (On Remix Web, this option will be greyed out).

Slither checkbox in the Solidity Static Analysis plugin

The Slither Analysis report will be displayed on the Slither tab of the Solidity Static Analysis plugin, next to the Remix analysis report for better readability.

Slither analysis report in the Solidity Static Analysis plugin

The result of the analysis will be shown in the Remix IDE terminal.

Slither analysis result in the Remix IDE terminal

To only run Slither Analysis, deselect the Remix and Solhint checkboxes and click on "Analyze". Now it will show only the Slither Analysis report.

默认情况下，Remix不会显示外部库（如remix-tests.sol、hardhat/console.sol等）的警告信息。要查看这些警告信息，请勾选标签为“显示外部库”的复选框。

Slither analysis report showing warnings for external libraries

更多详细信息

Analysis for Slither is run using the version set in the Solidity Compiler plugin. Slither is a CLI tool and requires solc to run. Before running the analysis, the Slither Websocket plugin checks if the current local solc version matches the version set in Remix IDE.

If the versions differ, the Slither Websocket plugin will use solc-select to switch the local solc version to match.

For example, if the local solc version is 0.8.4 and Remix IDE is set to 0.8.6, the logs will show the version switch.

Slither Websocket plugin log showing solc version selection

After a successful analysis run:

Slither analysis success after solc version switch