harsh on Warpcast

harsh pfp

100 USDC for running your .sol files through our new tool (swarm.0xmacro.com) to find vulnerabilities, and classify which ones were accurate and which were false positives / irrelevant. @bountybot

14 replies

0 recast

7 reactions

harsh pfp

@bountybot complete.

1 reply

0 recast

0 reaction

Linda Xie pfp

Nice one! Is this available for 1 person or are there more claims possible?

1 reply

0 recast

2 reactions

Brenner pfp

Where should we give any feedback? If it's already deployed to mainnet, can I still run it through? (I already did)

2 replies

0 recast

1 reaction

datadanne pfp

I ran a set of contracts (~2500 LOC) that are already deployed through it. It reported 3 medium risk issues, 18 low risk issues, 51 code quality issues and 37 gas optimizations. All three medium risk issues were false positives/irrelevant imo, will reply below with details

2 replies

0 recast

1 reaction

Brenner pfp

1 reply

0 recast

1 reaction

b0ggs.eth 🎩 pfp

Interesting! How complex of .sol files are you looking for. Have something super simple that I just finished writing fuzz tests for.

1 reply

0 recast

1 reaction

MetaEnd.degen — ᖽ🎩/dau pfp

MetaEnd.degen — ᖽ🎩/dau

I did run our MintWorldGame.com Faucet contracts through it, and didn't see anything out of the ordinary. Mostly onlyowner and code quality things, which slither would also highlight. it seems to be stuck on rating a confidence score right now tho https://swarm.0xmacro.com/reports/fe5f32ff-499e-4f1e-a23d-f596e85bee70

1 reply

0 recast

0 reaction

MHPALER pfp

I’ll give this a go with the @ets codebase. I’m still working on testnet and intend to deploy to mainnet asap.

1 reply

0 recast

1 reaction

Brenner pfp

How do I run a 2nd repo?

1 reply

0 recast

0 reaction

obxium pfp

Awesome tool! Found a legit high, some lows & loads of code quality issues in old deployed OZ-based contract.

1 reply

0 recast

1 reaction

Timmy🎩🔮⬆🕵️‍♂️ pfp

Timmy🎩🔮⬆🕵️‍♂️

@timmykwesi.eth

is this bounty still live?

1 reply

0 recast

0 reaction

Linda Xie pfp

Updated website to reflect 10 total claims for this bounty Also clarifying note that these should be .sol files that plan to be shipped to mainnet https://warpcast.com/harsh/0xf5763dbca1028d72d67f3d5f8b84a0b8c2642342 https://warpcast.com/harsh/0xe7e95e00

1 reply

0 recast

0 reaction

b0ggs.eth 🎩 pfp

Just ran my contract through. I am not finished writing it but I wanted to see how swarm works. Overall I think its very helpful and a better interface than running slither in Remix or AuditWizard. Most of the findings it came up with were known and I am in the midst of fixing, but again the UI is fantastic IMO.

1 reply

0 recast

1 reaction

Ivyroot pfp

I ran a WIP version of a game with a minting component through it just now and got 3 medium, 10 low, 33 code quality, and 21 gas optimizations. M-01: centralization by using ownable. Would love to know an alternate suggestion for this. M-02: user excess funds not refunded. Great point, didn't think of that...

4 replies

0 recast

1 reaction