@snovon/solast 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (738) hide show
  1. package/LICENSE +201 -0
  2. package/README.md +190 -0
  3. package/dist/api.d.ts +89 -0
  4. package/dist/api.js +33 -0
  5. package/dist/ast/resolve-return-names.d.ts +2 -0
  6. package/dist/ast/resolve-return-names.js +199 -0
  7. package/dist/ast/solc-walker.d.ts +17 -0
  8. package/dist/ast/solc-walker.js +497 -0
  9. package/dist/ast/storage-layout.d.ts +21 -0
  10. package/dist/ast/storage-layout.js +64 -0
  11. package/dist/cli.d.ts +65 -0
  12. package/dist/cli.js +755 -0
  13. package/dist/config.d.ts +9 -0
  14. package/dist/config.js +284 -0
  15. package/dist/dedup/files.d.ts +1 -0
  16. package/dist/dedup/files.js +74 -0
  17. package/dist/dedup/findings.d.ts +41 -0
  18. package/dist/dedup/findings.js +211 -0
  19. package/dist/detectors/_common/access-control.d.ts +204 -0
  20. package/dist/detectors/_common/access-control.js +377 -0
  21. package/dist/detectors/_common/ast.d.ts +139 -0
  22. package/dist/detectors/_common/ast.js +239 -0
  23. package/dist/detectors/_common/compiler-profile.d.ts +14 -0
  24. package/dist/detectors/_common/compiler-profile.js +66 -0
  25. package/dist/detectors/_common/dataflow.d.ts +75 -0
  26. package/dist/detectors/_common/dataflow.js +57 -0
  27. package/dist/detectors/_common/fhe.d.ts +7 -0
  28. package/dist/detectors/_common/fhe.js +40 -0
  29. package/dist/detectors/_common/integer-overflow-helpers.d.ts +58 -0
  30. package/dist/detectors/_common/integer-overflow-helpers.js +422 -0
  31. package/dist/detectors/_common/loop-call-stack.d.ts +9 -0
  32. package/dist/detectors/_common/loop-call-stack.js +132 -0
  33. package/dist/detectors/_common/oracle.d.ts +5 -0
  34. package/dist/detectors/_common/oracle.js +64 -0
  35. package/dist/detectors/_common/price-rate.d.ts +116 -0
  36. package/dist/detectors/_common/price-rate.js +446 -0
  37. package/dist/detectors/_common/source-text.d.ts +11 -0
  38. package/dist/detectors/_common/source-text.js +82 -0
  39. package/dist/detectors/_common/weighted-pool-invariant.d.ts +21 -0
  40. package/dist/detectors/_common/weighted-pool-invariant.js +105 -0
  41. package/dist/detectors/aave-v2-reentrancy.d.ts +7 -0
  42. package/dist/detectors/aave-v2-reentrancy.js +286 -0
  43. package/dist/detectors/access-control.d.ts +103 -0
  44. package/dist/detectors/access-control.js +983 -0
  45. package/dist/detectors/add-reentrancy-on-weth-contract.d.ts +7 -0
  46. package/dist/detectors/add-reentrancy-on-weth-contract.js +536 -0
  47. package/dist/detectors/ai-generated-randomness.d.ts +32 -0
  48. package/dist/detectors/ai-generated-randomness.js +239 -0
  49. package/dist/detectors/amm-spot-oracle-manipulation.d.ts +52 -0
  50. package/dist/detectors/amm-spot-oracle-manipulation.js +420 -0
  51. package/dist/detectors/analyzing-the-uniswap-v3-exploit.d.ts +26 -0
  52. package/dist/detectors/analyzing-the-uniswap-v3-exploit.js +279 -0
  53. package/dist/detectors/any-token-is-destroyed.d.ts +34 -0
  54. package/dist/detectors/any-token-is-destroyed.js +527 -0
  55. package/dist/detectors/anyswap-anytoken-permit-allowance-drain.d.ts +7 -0
  56. package/dist/detectors/anyswap-anytoken-permit-allowance-drain.js +524 -0
  57. package/dist/detectors/anyswap-insufficient-token-validation.d.ts +24 -0
  58. package/dist/detectors/anyswap-insufficient-token-validation.js +342 -0
  59. package/dist/detectors/approval-based-drain.d.ts +7 -0
  60. package/dist/detectors/approval-based-drain.js +772 -0
  61. package/dist/detectors/arbitrary-account-balance-transfer.d.ts +7 -0
  62. package/dist/detectors/arbitrary-account-balance-transfer.js +485 -0
  63. package/dist/detectors/arbitrary-address-spoofing-attack.d.ts +7 -0
  64. package/dist/detectors/arbitrary-address-spoofing-attack.js +444 -0
  65. package/dist/detectors/arbitrary-address-spoofing.d.ts +9 -0
  66. package/dist/detectors/arbitrary-address-spoofing.js +657 -0
  67. package/dist/detectors/arbitrary-call-error.d.ts +127 -0
  68. package/dist/detectors/arbitrary-call-error.js +1163 -0
  69. package/dist/detectors/arbitrary-call.d.ts +4 -0
  70. package/dist/detectors/arbitrary-call.js +11 -0
  71. package/dist/detectors/arbitrary-delegatecall-target.d.ts +35 -0
  72. package/dist/detectors/arbitrary-delegatecall-target.js +554 -0
  73. package/dist/detectors/arbitrary-recipient-no-access-control.d.ts +7 -0
  74. package/dist/detectors/arbitrary-recipient-no-access-control.js +638 -0
  75. package/dist/detectors/arbitrary-storage-proof-forgery.d.ts +35 -0
  76. package/dist/detectors/arbitrary-storage-proof-forgery.js +340 -0
  77. package/dist/detectors/arbitrary-transfer-from.d.ts +38 -0
  78. package/dist/detectors/arbitrary-transfer-from.js +339 -0
  79. package/dist/detectors/arbitrum-cross-chain-message-replay.d.ts +22 -0
  80. package/dist/detectors/arbitrum-cross-chain-message-replay.js +477 -0
  81. package/dist/detectors/avs-slashing-without-quorum-check.d.ts +50 -0
  82. package/dist/detectors/avs-slashing-without-quorum-check.js +386 -0
  83. package/dist/detectors/bad-debt-propagation.d.ts +13 -0
  84. package/dist/detectors/bad-debt-propagation.js +480 -0
  85. package/dist/detectors/bad-k-value-verification.d.ts +7 -0
  86. package/dist/detectors/bad-k-value-verification.js +512 -0
  87. package/dist/detectors/bad-randomness-zero-blockhash.d.ts +29 -0
  88. package/dist/detectors/bad-randomness-zero-blockhash.js +115 -0
  89. package/dist/detectors/balancer-flash-loan-manipulation.d.ts +33 -0
  90. package/dist/detectors/balancer-flash-loan-manipulation.js +178 -0
  91. package/dist/detectors/balancer-pause-guard.d.ts +33 -0
  92. package/dist/detectors/balancer-pause-guard.js +307 -0
  93. package/dist/detectors/balancer-weighted-pool-flash-loan.d.ts +42 -0
  94. package/dist/detectors/balancer-weighted-pool-flash-loan.js +275 -0
  95. package/dist/detectors/batch-transfer-overflow.d.ts +7 -0
  96. package/dist/detectors/batch-transfer-overflow.js +465 -0
  97. package/dist/detectors/beneficiary-validation.d.ts +7 -0
  98. package/dist/detectors/beneficiary-validation.js +696 -0
  99. package/dist/detectors/borrow-behalf-consent.d.ts +7 -0
  100. package/dist/detectors/borrow-behalf-consent.js +400 -0
  101. package/dist/detectors/break-continue-scope.d.ts +7 -0
  102. package/dist/detectors/break-continue-scope.js +194 -0
  103. package/dist/detectors/bridge-accounting-bypass.d.ts +65 -0
  104. package/dist/detectors/bridge-accounting-bypass.js +449 -0
  105. package/dist/detectors/bridge-business-logic-flaw-incorrect-acc.d.ts +43 -0
  106. package/dist/detectors/bridge-business-logic-flaw-incorrect-acc.js +394 -0
  107. package/dist/detectors/bridge-collateral-drain.d.ts +7 -0
  108. package/dist/detectors/bridge-collateral-drain.js +630 -0
  109. package/dist/detectors/bridge-forged-proof.d.ts +7 -0
  110. package/dist/detectors/bridge-forged-proof.js +754 -0
  111. package/dist/detectors/bridge-missing-message-nonce.d.ts +57 -0
  112. package/dist/detectors/bridge-missing-message-nonce.js +638 -0
  113. package/dist/detectors/bridge-swap-metapool-attack.d.ts +20 -0
  114. package/dist/detectors/bridge-swap-metapool-attack.js +230 -0
  115. package/dist/detectors/business-logic-flaw-flashloan-price-mani.d.ts +7 -0
  116. package/dist/detectors/business-logic-flaw-flashloan-price-mani.js +353 -0
  117. package/dist/detectors/business-logic-flaw-incorrect-recipient-balance.d.ts +7 -0
  118. package/dist/detectors/business-logic-flaw-incorrect-recipient-balance.js +403 -0
  119. package/dist/detectors/business-logic-flaw.d.ts +21 -0
  120. package/dist/detectors/business-logic-flaw.js +339 -0
  121. package/dist/detectors/business-logic.d.ts +17 -0
  122. package/dist/detectors/business-logic.js +22 -0
  123. package/dist/detectors/bypassed-insolvency-check.d.ts +30 -0
  124. package/dist/detectors/bypassed-insolvency-check.js +232 -0
  125. package/dist/detectors/bytecode-divergence-risk.d.ts +32 -0
  126. package/dist/detectors/bytecode-divergence-risk.js +150 -0
  127. package/dist/detectors/cache-array-length.d.ts +30 -0
  128. package/dist/detectors/cache-array-length.js +177 -0
  129. package/dist/detectors/cache-storage-reads.d.ts +46 -0
  130. package/dist/detectors/cache-storage-reads.js +323 -0
  131. package/dist/detectors/calldata-secret-access-control.d.ts +36 -0
  132. package/dist/detectors/calldata-secret-access-control.js +446 -0
  133. package/dist/detectors/capital-cross-contract-reentrancy.d.ts +34 -0
  134. package/dist/detectors/capital-cross-contract-reentrancy.js +481 -0
  135. package/dist/detectors/cartel-custom-approval-logic.d.ts +7 -0
  136. package/dist/detectors/cartel-custom-approval-logic.js +407 -0
  137. package/dist/detectors/ccip-receiver-missing-replay-guard.d.ts +22 -0
  138. package/dist/detectors/ccip-receiver-missing-replay-guard.js +413 -0
  139. package/dist/detectors/chain-coupling-risk.d.ts +8 -0
  140. package/dist/detectors/chain-coupling-risk.js +203 -0
  141. package/dist/detectors/chainlink-deprecated-function.d.ts +7 -0
  142. package/dist/detectors/chainlink-deprecated-function.js +205 -0
  143. package/dist/detectors/chainlink-tx-origin.d.ts +7 -0
  144. package/dist/detectors/chainlink-tx-origin.js +363 -0
  145. package/dist/detectors/check-effects-interactions.d.ts +39 -0
  146. package/dist/detectors/check-effects-interactions.js +783 -0
  147. package/dist/detectors/check-permit-missing-chainid.d.ts +27 -0
  148. package/dist/detectors/check-permit-missing-chainid.js +456 -0
  149. package/dist/detectors/classic-reentrancy.d.ts +93 -0
  150. package/dist/detectors/classic-reentrancy.js +645 -0
  151. package/dist/detectors/coinbase-morpho-wethloan-policy.d.ts +29 -0
  152. package/dist/detectors/coinbase-morpho-wethloan-policy.js +368 -0
  153. package/dist/detectors/compoundv2-inflation-attack.d.ts +7 -0
  154. package/dist/detectors/compoundv2-inflation-attack.js +675 -0
  155. package/dist/detectors/constructor-address-validation.d.ts +24 -0
  156. package/dist/detectors/constructor-address-validation.js +335 -0
  157. package/dist/detectors/constructor-interface-no-address-validation.d.ts +32 -0
  158. package/dist/detectors/constructor-interface-no-address-validation.js +283 -0
  159. package/dist/detectors/cross-chain-arbitrary-call.d.ts +7 -0
  160. package/dist/detectors/cross-chain-arbitrary-call.js +601 -0
  161. package/dist/detectors/cross-chain-input-validation.d.ts +31 -0
  162. package/dist/detectors/cross-chain-input-validation.js +347 -0
  163. package/dist/detectors/cross-chain-intent-replay.d.ts +38 -0
  164. package/dist/detectors/cross-chain-intent-replay.js +453 -0
  165. package/dist/detectors/cross-chain-intent-stale-resolution.d.ts +7 -0
  166. package/dist/detectors/cross-chain-intent-stale-resolution.js +463 -0
  167. package/dist/detectors/cross-chain-message-order-dependency.d.ts +8 -0
  168. package/dist/detectors/cross-chain-message-order-dependency.js +472 -0
  169. package/dist/detectors/cross-chain-message-replay.d.ts +8 -0
  170. package/dist/detectors/cross-chain-message-replay.js +568 -0
  171. package/dist/detectors/cross-chain-messaging.d.ts +7 -0
  172. package/dist/detectors/cross-chain-messaging.js +663 -0
  173. package/dist/detectors/cross-chain-msg-truncation.d.ts +7 -0
  174. package/dist/detectors/cross-chain-msg-truncation.js +453 -0
  175. package/dist/detectors/cross-chain-truncation.d.ts +7 -0
  176. package/dist/detectors/cross-chain-truncation.js +422 -0
  177. package/dist/detectors/cross-contract-integer-overflow.d.ts +76 -0
  178. package/dist/detectors/cross-contract-integer-overflow.js +554 -0
  179. package/dist/detectors/cross-contract-reentrancy-trusted-callee.d.ts +39 -0
  180. package/dist/detectors/cross-contract-reentrancy-trusted-callee.js +385 -0
  181. package/dist/detectors/cross-contract-reentrancy.d.ts +63 -0
  182. package/dist/detectors/cross-contract-reentrancy.js +631 -0
  183. package/dist/detectors/cross-function-reentrancy.d.ts +37 -0
  184. package/dist/detectors/cross-function-reentrancy.js +648 -0
  185. package/dist/detectors/cross-protocol-contagion.d.ts +20 -0
  186. package/dist/detectors/cross-protocol-contagion.js +445 -0
  187. package/dist/detectors/cross-protocol-oracle-collateral.d.ts +38 -0
  188. package/dist/detectors/cross-protocol-oracle-collateral.js +487 -0
  189. package/dist/detectors/cross-vm-reentrancy.d.ts +7 -0
  190. package/dist/detectors/cross-vm-reentrancy.js +484 -0
  191. package/dist/detectors/decimals-mismatch.d.ts +89 -0
  192. package/dist/detectors/decimals-mismatch.js +451 -0
  193. package/dist/detectors/deferred-state-update.d.ts +16 -0
  194. package/dist/detectors/deferred-state-update.js +35 -0
  195. package/dist/detectors/deflationary-token.d.ts +27 -0
  196. package/dist/detectors/deflationary-token.js +751 -0
  197. package/dist/detectors/delegate-transfer-unrestricted-caller.d.ts +44 -0
  198. package/dist/detectors/delegate-transfer-unrestricted-caller.js +410 -0
  199. package/dist/detectors/delegatecall-fallback-reentrancy-bypass.d.ts +14 -0
  200. package/dist/detectors/delegatecall-fallback-reentrancy-bypass.js +241 -0
  201. package/dist/detectors/delegatecall-in-loops.d.ts +7 -0
  202. package/dist/detectors/delegatecall-in-loops.js +129 -0
  203. package/dist/detectors/delegatecall-init-owner-mutator.d.ts +8 -0
  204. package/dist/detectors/delegatecall-init-owner-mutator.js +655 -0
  205. package/dist/detectors/delegatecall-init.d.ts +7 -0
  206. package/dist/detectors/delegatecall-init.js +769 -0
  207. package/dist/detectors/delegatecall-untrusted-implementation.d.ts +41 -0
  208. package/dist/detectors/delegatecall-untrusted-implementation.js +888 -0
  209. package/dist/detectors/delegated-authorization-bypass.d.ts +7 -0
  210. package/dist/detectors/delegated-authorization-bypass.js +370 -0
  211. package/dist/detectors/denial-of-service.d.ts +117 -0
  212. package/dist/detectors/denial-of-service.js +947 -0
  213. package/dist/detectors/division-before-multiplication.d.ts +7 -0
  214. package/dist/detectors/division-before-multiplication.js +303 -0
  215. package/dist/detectors/dn404-mirror-access-control.d.ts +26 -0
  216. package/dist/detectors/dn404-mirror-access-control.js +315 -0
  217. package/dist/detectors/doge-flashloan.d.ts +29 -0
  218. package/dist/detectors/doge-flashloan.js +329 -0
  219. package/dist/detectors/donate-inflation-exchangerate-roundin.d.ts +7 -0
  220. package/dist/detectors/donate-inflation-exchangerate-roundin.js +621 -0
  221. package/dist/detectors/donation-share-inflation.d.ts +24 -0
  222. package/dist/detectors/donation-share-inflation.js +466 -0
  223. package/dist/detectors/dont-let-eth-get-rekt.d.ts +84 -0
  224. package/dist/detectors/dont-let-eth-get-rekt.js +1151 -0
  225. package/dist/detectors/dos-unbounded-loop-external-call-revert.d.ts +37 -0
  226. package/dist/detectors/dos-unbounded-loop-external-call-revert.js +541 -0
  227. package/dist/detectors/eip1167-proxy-reentrancy.d.ts +7 -0
  228. package/dist/detectors/eip1167-proxy-reentrancy.js +508 -0
  229. package/dist/detectors/eip4626-vault-reentrancy.d.ts +32 -0
  230. package/dist/detectors/eip4626-vault-reentrancy.js +312 -0
  231. package/dist/detectors/eip5792-auth-replay.d.ts +45 -0
  232. package/dist/detectors/eip5792-auth-replay.js +519 -0
  233. package/dist/detectors/eip712-domain-separator.d.ts +42 -0
  234. package/dist/detectors/eip712-domain-separator.js +524 -0
  235. package/dist/detectors/eip712-signature-verification.d.ts +49 -0
  236. package/dist/detectors/eip712-signature-verification.js +689 -0
  237. package/dist/detectors/eip7702-auth-replay.d.ts +7 -0
  238. package/dist/detectors/eip7702-auth-replay.js +768 -0
  239. package/dist/detectors/eip7702-cross-chain-replay.d.ts +27 -0
  240. package/dist/detectors/eip7702-cross-chain-replay.js +307 -0
  241. package/dist/detectors/eip7702-delegated-eoa-approval-race.d.ts +39 -0
  242. package/dist/detectors/eip7702-delegated-eoa-approval-race.js +413 -0
  243. package/dist/detectors/eip7702-delegation-reentrancy.d.ts +21 -0
  244. package/dist/detectors/eip7702-delegation-reentrancy.js +705 -0
  245. package/dist/detectors/eip7702-delegation-risk.d.ts +7 -0
  246. package/dist/detectors/eip7702-delegation-risk.js +745 -0
  247. package/dist/detectors/eip7702-eoa-assumption.d.ts +57 -0
  248. package/dist/detectors/eip7702-eoa-assumption.js +461 -0
  249. package/dist/detectors/erc1155-batch-missing-per-id-approval.d.ts +23 -0
  250. package/dist/detectors/erc1155-batch-missing-per-id-approval.js +343 -0
  251. package/dist/detectors/erc1155-reentrancy.d.ts +31 -0
  252. package/dist/detectors/erc1155-reentrancy.js +217 -0
  253. package/dist/detectors/erc1271-stub-implementation.d.ts +21 -0
  254. package/dist/detectors/erc1271-stub-implementation.js +268 -0
  255. package/dist/detectors/erc20-safe-wrapper-return-unchecked.d.ts +43 -0
  256. package/dist/detectors/erc20-safe-wrapper-return-unchecked.js +368 -0
  257. package/dist/detectors/erc20-unchecked-non-standard-return.d.ts +55 -0
  258. package/dist/detectors/erc20-unchecked-non-standard-return.js +454 -0
  259. package/dist/detectors/erc2612-permit-frontrunning.d.ts +23 -0
  260. package/dist/detectors/erc2612-permit-frontrunning.js +246 -0
  261. package/dist/detectors/erc2771-context-spoofing.d.ts +41 -0
  262. package/dist/detectors/erc2771-context-spoofing.js +510 -0
  263. package/dist/detectors/erc4337-validation-storage-access.d.ts +35 -0
  264. package/dist/detectors/erc4337-validation-storage-access.js +232 -0
  265. package/dist/detectors/erc4626-totalassets-stub.d.ts +17 -0
  266. package/dist/detectors/erc4626-totalassets-stub.js +216 -0
  267. package/dist/detectors/erc6909-balance-overflow.d.ts +7 -0
  268. package/dist/detectors/erc6909-balance-overflow.js +688 -0
  269. package/dist/detectors/erc6909-operator-scope.d.ts +49 -0
  270. package/dist/detectors/erc6909-operator-scope.js +494 -0
  271. package/dist/detectors/erc721-unchecked-transfer.d.ts +38 -0
  272. package/dist/detectors/erc721-unchecked-transfer.js +364 -0
  273. package/dist/detectors/erc7579-module-install-without-threshold.d.ts +40 -0
  274. package/dist/detectors/erc7579-module-install-without-threshold.js +338 -0
  275. package/dist/detectors/erc7683-fill-validation.d.ts +53 -0
  276. package/dist/detectors/erc7683-fill-validation.js +758 -0
  277. package/dist/detectors/erc7683-intent-resolution.d.ts +7 -0
  278. package/dist/detectors/erc7683-intent-resolution.js +457 -0
  279. package/dist/detectors/erc777-callback-reentrancy.d.ts +8 -0
  280. package/dist/detectors/erc777-callback-reentrancy.js +439 -0
  281. package/dist/detectors/erc777-reentrancy.d.ts +7 -0
  282. package/dist/detectors/erc777-reentrancy.js +488 -0
  283. package/dist/detectors/erc777-tokens-to-send-reentrancy.d.ts +47 -0
  284. package/dist/detectors/erc777-tokens-to-send-reentrancy.js +674 -0
  285. package/dist/detectors/estuary-token-flaw.d.ts +16 -0
  286. package/dist/detectors/estuary-token-flaw.js +547 -0
  287. package/dist/detectors/euler-debt-token-manipulation.d.ts +32 -0
  288. package/dist/detectors/euler-debt-token-manipulation.js +347 -0
  289. package/dist/detectors/exploiting-a-vulnerability-in-curve-fina.d.ts +29 -0
  290. package/dist/detectors/exploiting-a-vulnerability-in-curve-fina.js +210 -0
  291. package/dist/detectors/fallback-delegatecall-reentrancy.d.ts +14 -0
  292. package/dist/detectors/fallback-delegatecall-reentrancy.js +236 -0
  293. package/dist/detectors/farm-business-logic-flaw-lack-of-access.d.ts +7 -0
  294. package/dist/detectors/farm-business-logic-flaw-lack-of-access.js +665 -0
  295. package/dist/detectors/fee-mechanism-exploitation.d.ts +20 -0
  296. package/dist/detectors/fee-mechanism-exploitation.js +400 -0
  297. package/dist/detectors/fee-on-transfer-balance-mismatch.d.ts +49 -0
  298. package/dist/detectors/fee-on-transfer-balance-mismatch.js +394 -0
  299. package/dist/detectors/fhe-encrypted-input-validation.d.ts +29 -0
  300. package/dist/detectors/fhe-encrypted-input-validation.js +210 -0
  301. package/dist/detectors/fhe-handle-leakage.d.ts +44 -0
  302. package/dist/detectors/fhe-handle-leakage.js +315 -0
  303. package/dist/detectors/fhe-oz-pattern-misuse.d.ts +26 -0
  304. package/dist/detectors/fhe-oz-pattern-misuse.js +311 -0
  305. package/dist/detectors/fhe-state-leakage.d.ts +8 -0
  306. package/dist/detectors/fhe-state-leakage.js +400 -0
  307. package/dist/detectors/fi-bridges.d.ts +33 -0
  308. package/dist/detectors/fi-bridges.js +428 -0
  309. package/dist/detectors/finance-access-control-price-oracle-man.d.ts +9 -0
  310. package/dist/detectors/finance-access-control-price-oracle-man.js +640 -0
  311. package/dist/detectors/finance-bridge-address0safetransferfrom.d.ts +8 -0
  312. package/dist/detectors/finance-bridge-address0safetransferfrom.js +574 -0
  313. package/dist/detectors/finance-business-logic-in-mint.d.ts +54 -0
  314. package/dist/detectors/finance-business-logic-in-mint.js +687 -0
  315. package/dist/detectors/finance-erc667-reentrancy.d.ts +7 -0
  316. package/dist/detectors/finance-erc667-reentrancy.js +509 -0
  317. package/dist/detectors/finance-flashloan-price-oracle-manipul.d.ts +7 -0
  318. package/dist/detectors/finance-flashloan-price-oracle-manipul.js +546 -0
  319. package/dist/detectors/finance-flashloan-reentrancy.d.ts +7 -0
  320. package/dist/detectors/finance-flashloan-reentrancy.js +547 -0
  321. package/dist/detectors/finance-swap-metapool-attack.d.ts +19 -0
  322. package/dist/detectors/finance-swap-metapool-attack.js +321 -0
  323. package/dist/detectors/flashloan-price-manipulation.d.ts +7 -0
  324. package/dist/detectors/flashloan-price-manipulation.js +950 -0
  325. package/dist/detectors/flashloan-reentrancy-rari.d.ts +28 -0
  326. package/dist/detectors/flashloan-reentrancy-rari.js +577 -0
  327. package/dist/detectors/flashloan-reentrancy.d.ts +7 -0
  328. package/dist/detectors/flashloan-reentrancy.js +383 -0
  329. package/dist/detectors/flashloan-token-migrate.d.ts +7 -0
  330. package/dist/detectors/flashloan-token-migrate.js +274 -0
  331. package/dist/detectors/force-fed-eth-state-corruption.d.ts +32 -0
  332. package/dist/detectors/force-fed-eth-state-corruption.js +293 -0
  333. package/dist/detectors/free-mint-bug.d.ts +41 -0
  334. package/dist/detectors/free-mint-bug.js +483 -0
  335. package/dist/detectors/front-running-orderbook-state-update.d.ts +37 -0
  336. package/dist/detectors/front-running-orderbook-state-update.js +471 -0
  337. package/dist/detectors/front-running-shared-collateral-write.d.ts +41 -0
  338. package/dist/detectors/front-running-shared-collateral-write.js +508 -0
  339. package/dist/detectors/fusion-v1-settlement-arbitrary-yul-calld.d.ts +30 -0
  340. package/dist/detectors/fusion-v1-settlement-arbitrary-yul-calld.js +354 -0
  341. package/dist/detectors/generalized-frontrunning.d.ts +7 -0
  342. package/dist/detectors/generalized-frontrunning.js +836 -0
  343. package/dist/detectors/governance-flash-loan.d.ts +62 -0
  344. package/dist/detectors/governance-flash-loan.js +452 -0
  345. package/dist/detectors/governance-flashloan-vote.d.ts +41 -0
  346. package/dist/detectors/governance-flashloan-vote.js +272 -0
  347. package/dist/detectors/halborn-security-report-aave-v3.d.ts +6 -0
  348. package/dist/detectors/halborn-security-report-aave-v3.js +357 -0
  349. package/dist/detectors/incorrect-access-control.d.ts +26 -0
  350. package/dist/detectors/incorrect-access-control.js +328 -0
  351. package/dist/detectors/incorrect-burn-accounting.d.ts +10 -0
  352. package/dist/detectors/incorrect-burn-accounting.js +387 -0
  353. package/dist/detectors/incorrect-dividends-calculation.d.ts +27 -0
  354. package/dist/detectors/incorrect-dividends-calculation.js +524 -0
  355. package/dist/detectors/incorrect-dividends.d.ts +27 -0
  356. package/dist/detectors/incorrect-dividends.js +485 -0
  357. package/dist/detectors/incorrect-input-validation.d.ts +23 -0
  358. package/dist/detectors/incorrect-input-validation.js +312 -0
  359. package/dist/detectors/incorrect-signature-verification.d.ts +26 -0
  360. package/dist/detectors/incorrect-signature-verification.js +530 -0
  361. package/dist/detectors/infinite-loop.d.ts +7 -0
  362. package/dist/detectors/infinite-loop.js +440 -0
  363. package/dist/detectors/infinite-number-of-loans.d.ts +13 -0
  364. package/dist/detectors/infinite-number-of-loans.js +565 -0
  365. package/dist/detectors/inheritance-override.d.ts +26 -0
  366. package/dist/detectors/inheritance-override.js +320 -0
  367. package/dist/detectors/initialization-access-control.d.ts +8 -0
  368. package/dist/detectors/initialization-access-control.js +659 -0
  369. package/dist/detectors/insecure-randomness.d.ts +73 -0
  370. package/dist/detectors/insecure-randomness.js +610 -0
  371. package/dist/detectors/insufficient-access-control-trusted-param.d.ts +39 -0
  372. package/dist/detectors/insufficient-access-control-trusted-param.js +356 -0
  373. package/dist/detectors/insufficient-dvn-threshold.d.ts +32 -0
  374. package/dist/detectors/insufficient-dvn-threshold.js +585 -0
  375. package/dist/detectors/integer-overflow-detector.d.ts +45 -0
  376. package/dist/detectors/integer-overflow-detector.js +284 -0
  377. package/dist/detectors/integer-overflow.d.ts +95 -0
  378. package/dist/detectors/integer-overflow.js +344 -0
  379. package/dist/detectors/integer-underflow.d.ts +7 -0
  380. package/dist/detectors/integer-underflow.js +422 -0
  381. package/dist/detectors/intent-settlement-balance-manipulation.d.ts +22 -0
  382. package/dist/detectors/intent-settlement-balance-manipulation.js +548 -0
  383. package/dist/detectors/l1-to-l2-message-reentrancy.d.ts +7 -0
  384. package/dist/detectors/l1-to-l2-message-reentrancy.js +545 -0
  385. package/dist/detectors/l2-withdrawal-validation.d.ts +8 -0
  386. package/dist/detectors/l2-withdrawal-validation.js +303 -0
  387. package/dist/detectors/lack-of-access-control.d.ts +7 -0
  388. package/dist/detectors/lack-of-access-control.js +425 -0
  389. package/dist/detectors/lack-of-calldata-validation.d.ts +16 -0
  390. package/dist/detectors/lack-of-calldata-validation.js +914 -0
  391. package/dist/detectors/lack-of-input-validation-reentrancy.d.ts +7 -0
  392. package/dist/detectors/lack-of-input-validation-reentrancy.js +637 -0
  393. package/dist/detectors/lack-of-slippage-control.d.ts +7 -0
  394. package/dist/detectors/lack-of-slippage-control.js +513 -0
  395. package/dist/detectors/lack-of-slippage-protection.d.ts +7 -0
  396. package/dist/detectors/lack-of-slippage-protection.js +474 -0
  397. package/dist/detectors/lack-of-validation-data.d.ts +23 -0
  398. package/dist/detectors/lack-of-validation-data.js +391 -0
  399. package/dist/detectors/lack-of-validation-pool.d.ts +7 -0
  400. package/dist/detectors/lack-of-validation-pool.js +492 -0
  401. package/dist/detectors/lack-of-validation-userdata.d.ts +7 -0
  402. package/dist/detectors/lack-of-validation-userdata.js +583 -0
  403. package/dist/detectors/lack-of-validation.d.ts +27 -0
  404. package/dist/detectors/lack-of-validation.js +609 -0
  405. package/dist/detectors/layerzero-dvn-quorum-missing.d.ts +22 -0
  406. package/dist/detectors/layerzero-dvn-quorum-missing.js +464 -0
  407. package/dist/detectors/layerzero-v2-unverified-origin.d.ts +40 -0
  408. package/dist/detectors/layerzero-v2-unverified-origin.js +368 -0
  409. package/dist/detectors/liquidation-accounting-desync.d.ts +14 -0
  410. package/dist/detectors/liquidation-accounting-desync.js +145 -0
  411. package/dist/detectors/liquidation-gain-manipulation.d.ts +42 -0
  412. package/dist/detectors/liquidation-gain-manipulation.js +606 -0
  413. package/dist/detectors/liquidation-price-rounding-advantage.d.ts +26 -0
  414. package/dist/detectors/liquidation-price-rounding-advantage.js +283 -0
  415. package/dist/detectors/liquidity-poisoning.d.ts +25 -0
  416. package/dist/detectors/liquidity-poisoning.js +339 -0
  417. package/dist/detectors/loans-malicious-proposal-price-oracle.d.ts +44 -0
  418. package/dist/detectors/loans-malicious-proposal-price-oracle.js +813 -0
  419. package/dist/detectors/logic-flaw.d.ts +186 -0
  420. package/dist/detectors/logic-flaw.js +3356 -0
  421. package/dist/detectors/manipulation-of-funds.d.ts +31 -0
  422. package/dist/detectors/manipulation-of-funds.js +304 -0
  423. package/dist/detectors/merkl-unsafe-claim-callback.d.ts +22 -0
  424. package/dist/detectors/merkl-unsafe-claim-callback.js +94 -0
  425. package/dist/detectors/mev-boost-timestamp.d.ts +7 -0
  426. package/dist/detectors/mev-boost-timestamp.js +318 -0
  427. package/dist/detectors/mev-merge-exploit.d.ts +29 -0
  428. package/dist/detectors/mev-merge-exploit.js +397 -0
  429. package/dist/detectors/mev-sandwich-vulnerability.d.ts +24 -0
  430. package/dist/detectors/mev-sandwich-vulnerability.js +648 -0
  431. package/dist/detectors/mev-slot-manipulation.d.ts +36 -0
  432. package/dist/detectors/mev-slot-manipulation.js +691 -0
  433. package/dist/detectors/mevbot-insufficient-validation.d.ts +48 -0
  434. package/dist/detectors/mevbot-insufficient-validation.js +574 -0
  435. package/dist/detectors/migration-rebalance-without-bound.d.ts +7 -0
  436. package/dist/detectors/migration-rebalance-without-bound.js +514 -0
  437. package/dist/detectors/mint-hardcoded-asset-parity.d.ts +31 -0
  438. package/dist/detectors/mint-hardcoded-asset-parity.js +356 -0
  439. package/dist/detectors/miscalculation-on-spendallowance.d.ts +7 -0
  440. package/dist/detectors/miscalculation-on-spendallowance.js +188 -0
  441. package/dist/detectors/misconfiguration.d.ts +27 -0
  442. package/dist/detectors/misconfiguration.js +410 -0
  443. package/dist/detectors/missing-access-control-caller-supplied-auth.d.ts +7 -0
  444. package/dist/detectors/missing-access-control-caller-supplied-auth.js +550 -0
  445. package/dist/detectors/missing-access-control-receiver-payout.d.ts +7 -0
  446. package/dist/detectors/missing-access-control-receiver-payout.js +460 -0
  447. package/dist/detectors/missing-access-control-role-or-transferfrom.d.ts +7 -0
  448. package/dist/detectors/missing-access-control-role-or-transferfrom.js +663 -0
  449. package/dist/detectors/missing-access-control.d.ts +19 -0
  450. package/dist/detectors/missing-access-control.js +781 -0
  451. package/dist/detectors/missing-sequencer-uptime-check.d.ts +30 -0
  452. package/dist/detectors/missing-sequencer-uptime-check.js +348 -0
  453. package/dist/detectors/missing-storage-gap.d.ts +19 -0
  454. package/dist/detectors/missing-storage-gap.js +193 -0
  455. package/dist/detectors/missing-swap-deadline-slippage.d.ts +31 -0
  456. package/dist/detectors/missing-swap-deadline-slippage.js +231 -0
  457. package/dist/detectors/missing-zk-proof-verification.d.ts +60 -0
  458. package/dist/detectors/missing-zk-proof-verification.js +547 -0
  459. package/dist/detectors/my-experience-with-yearn-finance.d.ts +7 -0
  460. package/dist/detectors/my-experience-with-yearn-finance.js +552 -0
  461. package/dist/detectors/network-bridge-ronin.d.ts +7 -0
  462. package/dist/detectors/network-bridge-ronin.js +408 -0
  463. package/dist/detectors/network-bridge.d.ts +7 -0
  464. package/dist/detectors/network-bridge.js +444 -0
  465. package/dist/detectors/network-underflow.d.ts +7 -0
  466. package/dist/detectors/network-underflow.js +517 -0
  467. package/dist/detectors/nft-denial-of-service.d.ts +7 -0
  468. package/dist/detectors/nft-denial-of-service.js +223 -0
  469. package/dist/detectors/nft-marketplace-order-reentrancy.d.ts +7 -0
  470. package/dist/detectors/nft-marketplace-order-reentrancy.js +427 -0
  471. package/dist/detectors/nft-token-standard-access-control.d.ts +7 -0
  472. package/dist/detectors/nft-token-standard-access-control.js +455 -0
  473. package/dist/detectors/oracle-manipulation-amm-spot-price.d.ts +42 -0
  474. package/dist/detectors/oracle-manipulation-amm-spot-price.js +321 -0
  475. package/dist/detectors/oracle-manipulation-liquidity-withdrawal.d.ts +27 -0
  476. package/dist/detectors/oracle-manipulation-liquidity-withdrawal.js +192 -0
  477. package/dist/detectors/oracle-manipulation.d.ts +90 -0
  478. package/dist/detectors/oracle-manipulation.js +1023 -0
  479. package/dist/detectors/oracle-vortex-manipulation.d.ts +30 -0
  480. package/dist/detectors/oracle-vortex-manipulation.js +473 -0
  481. package/dist/detectors/overpriced-asset-in-oracle.d.ts +41 -0
  482. package/dist/detectors/overpriced-asset-in-oracle.js +420 -0
  483. package/dist/detectors/oz-access-control-roles.d.ts +33 -0
  484. package/dist/detectors/oz-access-control-roles.js +359 -0
  485. package/dist/detectors/pair-manipulation-transfer-hook.d.ts +38 -0
  486. package/dist/detectors/pair-manipulation-transfer-hook.js +366 -0
  487. package/dist/detectors/parameter-access-control.d.ts +47 -0
  488. package/dist/detectors/parameter-access-control.js +511 -0
  489. package/dist/detectors/parameter-manipulation.d.ts +7 -0
  490. package/dist/detectors/parameter-manipulation.js +505 -0
  491. package/dist/detectors/parity-multisig-delegatecall.d.ts +7 -0
  492. package/dist/detectors/parity-multisig-delegatecall.js +707 -0
  493. package/dist/detectors/permissionless-claim-amm-spot-pricing.d.ts +7 -0
  494. package/dist/detectors/permissionless-claim-amm-spot-pricing.js +351 -0
  495. package/dist/detectors/permit-future-dated-deadline.d.ts +31 -0
  496. package/dist/detectors/permit-future-dated-deadline.js +339 -0
  497. package/dist/detectors/phishing-attack-bybit.d.ts +37 -0
  498. package/dist/detectors/phishing-attack-bybit.js +513 -0
  499. package/dist/detectors/post-insolvency-check.d.ts +7 -0
  500. package/dist/detectors/post-insolvency-check.js +277 -0
  501. package/dist/detectors/precision-loss-vulnerability.d.ts +7 -0
  502. package/dist/detectors/precision-loss-vulnerability.js +472 -0
  503. package/dist/detectors/precision-truncation.d.ts +8 -0
  504. package/dist/detectors/precision-truncation.js +425 -0
  505. package/dist/detectors/price-dependency-veth.d.ts +41 -0
  506. package/dist/detectors/price-dependency-veth.js +588 -0
  507. package/dist/detectors/price-feed-verification.d.ts +7 -0
  508. package/dist/detectors/price-feed-verification.js +557 -0
  509. package/dist/detectors/price-manipulation-reentrancy.d.ts +32 -0
  510. package/dist/detectors/price-manipulation-reentrancy.js +445 -0
  511. package/dist/detectors/price-manipulation-via-reentranc.d.ts +7 -0
  512. package/dist/detectors/price-manipulation-via-reentranc.js +569 -0
  513. package/dist/detectors/price-oracle-manipulation.d.ts +25 -0
  514. package/dist/detectors/price-oracle-manipulation.js +530 -0
  515. package/dist/detectors/project-instant-rewards-unlocked.d.ts +6 -0
  516. package/dist/detectors/project-instant-rewards-unlocked.js +462 -0
  517. package/dist/detectors/protocol-reentrancy.d.ts +7 -0
  518. package/dist/detectors/protocol-reentrancy.js +457 -0
  519. package/dist/detectors/proxy-init-race.d.ts +11 -0
  520. package/dist/detectors/proxy-init-race.js +634 -0
  521. package/dist/detectors/proxy-storage-slot-collision.d.ts +7 -0
  522. package/dist/detectors/proxy-storage-slot-collision.js +135 -0
  523. package/dist/detectors/public-internal-function.d.ts +39 -0
  524. package/dist/detectors/public-internal-function.js +233 -0
  525. package/dist/detectors/quote-silent-zero.d.ts +25 -0
  526. package/dist/detectors/quote-silent-zero.js +156 -0
  527. package/dist/detectors/readonly-reentrancy.d.ts +9 -0
  528. package/dist/detectors/readonly-reentrancy.js +108 -0
  529. package/dist/detectors/receipt-redemption-missing-validation.d.ts +31 -0
  530. package/dist/detectors/receipt-redemption-missing-validation.js +453 -0
  531. package/dist/detectors/reentrancy-balance.d.ts +36 -0
  532. package/dist/detectors/reentrancy-balance.js +577 -0
  533. package/dist/detectors/reentrancy-business-logic-game.d.ts +36 -0
  534. package/dist/detectors/reentrancy-business-logic-game.js +616 -0
  535. package/dist/detectors/reentrancy-on-sell-nft.d.ts +23 -0
  536. package/dist/detectors/reentrancy-on-sell-nft.js +510 -0
  537. package/dist/detectors/reflection-token-balance-desync.d.ts +28 -0
  538. package/dist/detectors/reflection-token-balance-desync.js +246 -0
  539. package/dist/detectors/registry-engine.d.ts +34 -0
  540. package/dist/detectors/registry-engine.js +388 -0
  541. package/dist/detectors/rollup-unvalidated-state-update.d.ts +35 -0
  542. package/dist/detectors/rollup-unvalidated-state-update.js +286 -0
  543. package/dist/detectors/s-horizon-bridge-private-key-compromis.d.ts +8 -0
  544. package/dist/detectors/s-horizon-bridge-private-key-compromis.js +615 -0
  545. package/dist/detectors/share-price-manipulation.d.ts +7 -0
  546. package/dist/detectors/share-price-manipulation.js +653 -0
  547. package/dist/detectors/signature-replay.d.ts +30 -0
  548. package/dist/detectors/signature-replay.js +367 -0
  549. package/dist/detectors/simpleswap-unverified-approval.d.ts +27 -0
  550. package/dist/detectors/simpleswap-unverified-approval.js +198 -0
  551. package/dist/detectors/single-spot-oracle-collateral-valuation.d.ts +22 -0
  552. package/dist/detectors/single-spot-oracle-collateral-valuation.js +419 -0
  553. package/dist/detectors/skim-token-balance.d.ts +7 -0
  554. package/dist/detectors/skim-token-balance.js +788 -0
  555. package/dist/detectors/sky-oft-governance-payload.d.ts +7 -0
  556. package/dist/detectors/sky-oft-governance-payload.js +515 -0
  557. package/dist/detectors/sky-oft-governance-truncation.d.ts +32 -0
  558. package/dist/detectors/sky-oft-governance-truncation.js +377 -0
  559. package/dist/detectors/solana-evm-bridge-truncation.d.ts +7 -0
  560. package/dist/detectors/solana-evm-bridge-truncation.js +638 -0
  561. package/dist/detectors/solhint-unchecked-low-level-call.d.ts +74 -0
  562. package/dist/detectors/solhint-unchecked-low-level-call.js +463 -0
  563. package/dist/detectors/stablecoin-pair-spot-oracle.d.ts +7 -0
  564. package/dist/detectors/stablecoin-pair-spot-oracle.js +364 -0
  565. package/dist/detectors/staked-rate-as-oracle.d.ts +44 -0
  566. package/dist/detectors/staked-rate-as-oracle.js +497 -0
  567. package/dist/detectors/stale-oracle.d.ts +63 -0
  568. package/dist/detectors/stale-oracle.js +649 -0
  569. package/dist/detectors/starkware-proof-validation-gap.d.ts +18 -0
  570. package/dist/detectors/starkware-proof-validation-gap.js +629 -0
  571. package/dist/detectors/steth-transfer-reentrancy.d.ts +8 -0
  572. package/dist/detectors/steth-transfer-reentrancy.js +317 -0
  573. package/dist/detectors/storage-collision-malicious-proposal.d.ts +27 -0
  574. package/dist/detectors/storage-collision-malicious-proposal.js +386 -0
  575. package/dist/detectors/timestamp-manipulation.d.ts +49 -0
  576. package/dist/detectors/timestamp-manipulation.js +383 -0
  577. package/dist/detectors/token-access-control.d.ts +7 -0
  578. package/dist/detectors/token-access-control.js +544 -0
  579. package/dist/detectors/token-incorrect-signature-verification.d.ts +23 -0
  580. package/dist/detectors/token-incorrect-signature-verification.js +434 -0
  581. package/dist/detectors/token-transfer-logic-flaw.d.ts +33 -0
  582. package/dist/detectors/token-transfer-logic-flaw.js +267 -0
  583. package/dist/detectors/transfer-double-debit-pool-recipient.d.ts +7 -0
  584. package/dist/detectors/transfer-double-debit-pool-recipient.js +542 -0
  585. package/dist/detectors/treasury-reentrancy.d.ts +7 -0
  586. package/dist/detectors/treasury-reentrancy.js +442 -0
  587. package/dist/detectors/tstore-poison.d.ts +32 -0
  588. package/dist/detectors/tstore-poison.js +417 -0
  589. package/dist/detectors/tstore-race-condition.d.ts +7 -0
  590. package/dist/detectors/tstore-race-condition.js +632 -0
  591. package/dist/detectors/types.d.ts +85 -0
  592. package/dist/detectors/types.js +20 -0
  593. package/dist/detectors/unauthorized-payer-transferfrom.d.ts +66 -0
  594. package/dist/detectors/unauthorized-payer-transferfrom.js +339 -0
  595. package/dist/detectors/unauthorized-transferfrom-shell.d.ts +7 -0
  596. package/dist/detectors/unauthorized-transferfrom-shell.js +504 -0
  597. package/dist/detectors/unauthorized-transferfrom.d.ts +16 -0
  598. package/dist/detectors/unauthorized-transferfrom.js +838 -0
  599. package/dist/detectors/unbound-zk-verifier-input.d.ts +7 -0
  600. package/dist/detectors/unbound-zk-verifier-input.js +445 -0
  601. package/dist/detectors/unbounded-share-price-collateral-oracle.d.ts +48 -0
  602. package/dist/detectors/unbounded-share-price-collateral-oracle.js +566 -0
  603. package/dist/detectors/uncapped-reward-emission.d.ts +7 -0
  604. package/dist/detectors/uncapped-reward-emission.js +493 -0
  605. package/dist/detectors/unchecked-call-forwarding.d.ts +31 -0
  606. package/dist/detectors/unchecked-call-forwarding.js +330 -0
  607. package/dist/detectors/unchecked-external-call-unconditional-state-mutation.d.ts +18 -0
  608. package/dist/detectors/unchecked-external-call-unconditional-state-mutation.js +311 -0
  609. package/dist/detectors/unchecked-external-call.d.ts +66 -0
  610. package/dist/detectors/unchecked-external-call.js +389 -0
  611. package/dist/detectors/unchecked-oft-return.d.ts +13 -0
  612. package/dist/detectors/unchecked-oft-return.js +118 -0
  613. package/dist/detectors/unguarded-governance-execution.d.ts +35 -0
  614. package/dist/detectors/unguarded-governance-execution.js +422 -0
  615. package/dist/detectors/unguarded-governance-executor.d.ts +35 -0
  616. package/dist/detectors/unguarded-governance-executor.js +349 -0
  617. package/dist/detectors/unindexed-event-address.d.ts +7 -0
  618. package/dist/detectors/unindexed-event-address.js +268 -0
  619. package/dist/detectors/uninitialized-implementation.d.ts +27 -0
  620. package/dist/detectors/uninitialized-implementation.js +333 -0
  621. package/dist/detectors/uninitialized-storage-pointer.d.ts +7 -0
  622. package/dist/detectors/uninitialized-storage-pointer.js +110 -0
  623. package/dist/detectors/uniswap-skim-token-balance-attack.d.ts +8 -0
  624. package/dist/detectors/uniswap-skim-token-balance-attack.js +331 -0
  625. package/dist/detectors/uniswap-v4-hook-state-manipulation.d.ts +7 -0
  626. package/dist/detectors/uniswap-v4-hook-state-manipulation.js +296 -0
  627. package/dist/detectors/unprotected-admin-or-fund-sink.d.ts +7 -0
  628. package/dist/detectors/unprotected-admin-or-fund-sink.js +643 -0
  629. package/dist/detectors/unprotected-dex-swap.d.ts +43 -0
  630. package/dist/detectors/unprotected-dex-swap.js +334 -0
  631. package/dist/detectors/unprotected-initializer.d.ts +7 -0
  632. package/dist/detectors/unprotected-initializer.js +707 -0
  633. package/dist/detectors/unprotected-pair-initializer.d.ts +22 -0
  634. package/dist/detectors/unprotected-pair-initializer.js +359 -0
  635. package/dist/detectors/unprotected-upgrade-function.d.ts +7 -0
  636. package/dist/detectors/unprotected-upgrade-function.js +180 -0
  637. package/dist/detectors/unreachable-code-0.8.28.d.ts +19 -0
  638. package/dist/detectors/unreachable-code-0.8.28.js +206 -0
  639. package/dist/detectors/unsafe-proxy-storage.d.ts +7 -0
  640. package/dist/detectors/unsafe-proxy-storage.js +436 -0
  641. package/dist/detectors/unsafe-transient-storage.d.ts +7 -0
  642. package/dist/detectors/unsafe-transient-storage.js +1052 -0
  643. package/dist/detectors/unsafe-tx-origin.d.ts +9 -0
  644. package/dist/detectors/unsafe-tx-origin.js +179 -0
  645. package/dist/detectors/unsigned-validity-window.d.ts +20 -0
  646. package/dist/detectors/unsigned-validity-window.js +220 -0
  647. package/dist/detectors/unvalidated-interface-address.d.ts +25 -0
  648. package/dist/detectors/unvalidated-interface-address.js +377 -0
  649. package/dist/detectors/uups-uninitialized-storage.d.ts +9 -0
  650. package/dist/detectors/uups-uninitialized-storage.js +366 -0
  651. package/dist/detectors/v2-error-k-value-attack.d.ts +33 -0
  652. package/dist/detectors/v2-error-k-value-attack.js +276 -0
  653. package/dist/detectors/v2-k-invariant-bypass.d.ts +33 -0
  654. package/dist/detectors/v2-k-invariant-bypass.js +283 -0
  655. package/dist/detectors/v4-hook-reentrancy.d.ts +9 -0
  656. package/dist/detectors/v4-hook-reentrancy.js +488 -0
  657. package/dist/detectors/vault-inflation-rounding.d.ts +23 -0
  658. package/dist/detectors/vault-inflation-rounding.js +477 -0
  659. package/dist/detectors/vault-share-price-manipulation.d.ts +7 -0
  660. package/dist/detectors/vault-share-price-manipulation.js +332 -0
  661. package/dist/detectors/vortex-interaction-guard.d.ts +45 -0
  662. package/dist/detectors/vortex-interaction-guard.js +275 -0
  663. package/dist/detectors/vortex-protocol-reentrancy-guard.d.ts +27 -0
  664. package/dist/detectors/vortex-protocol-reentrancy-guard.js +408 -0
  665. package/dist/detectors/vulnerable-price-dependency.d.ts +41 -0
  666. package/dist/detectors/vulnerable-price-dependency.js +473 -0
  667. package/dist/detectors/weak-random-mint.d.ts +37 -0
  668. package/dist/detectors/weak-random-mint.js +271 -0
  669. package/dist/detectors/withdraw-be-to-withdraw.d.ts +26 -0
  670. package/dist/detectors/withdraw-be-to-withdraw.js +329 -0
  671. package/dist/detectors/wrong-function-visibility.d.ts +29 -0
  672. package/dist/detectors/wrong-function-visibility.js +147 -0
  673. package/dist/detectors/wrong-price-calculation.d.ts +42 -0
  674. package/dist/detectors/wrong-price-calculation.js +387 -0
  675. package/dist/detectors/yearn-vault-v2-share-price-manipulation.d.ts +32 -0
  676. package/dist/detectors/yearn-vault-v2-share-price-manipulation.js +248 -0
  677. package/dist/detectors/zero-fee.d.ts +7 -0
  678. package/dist/detectors/zero-fee.js +596 -0
  679. package/dist/detectors/zetachain-gateway-hack-analysis.d.ts +7 -0
  680. package/dist/detectors/zetachain-gateway-hack-analysis.js +629 -0
  681. package/dist/detectors/zk-rollup-da-gap.d.ts +8 -0
  682. package/dist/detectors/zk-rollup-da-gap.js +322 -0
  683. package/dist/detectors/zksync-batch-validation.d.ts +8 -0
  684. package/dist/detectors/zksync-batch-validation.js +461 -0
  685. package/dist/detectors/zksync-era-rollup-state-update.d.ts +60 -0
  686. package/dist/detectors/zksync-era-rollup-state-update.js +360 -0
  687. package/dist/detectors/zksync-simulation-drift.d.ts +35 -0
  688. package/dist/detectors/zksync-simulation-drift.js +309 -0
  689. package/dist/exit-codes.d.ts +15 -0
  690. package/dist/exit-codes.js +18 -0
  691. package/dist/formatters/github-actions.d.ts +2 -0
  692. package/dist/formatters/github-actions.js +61 -0
  693. package/dist/formatters/sarif.d.ts +24 -0
  694. package/dist/formatters/sarif.js +670 -0
  695. package/dist/formatters/text.d.ts +14 -0
  696. package/dist/formatters/text.js +152 -0
  697. package/dist/fp-rates.json +70 -0
  698. package/dist/identity/diff-baseline.d.ts +16 -0
  699. package/dist/identity/diff-baseline.js +152 -0
  700. package/dist/identity/hashing.d.ts +39 -0
  701. package/dist/identity/hashing.js +96 -0
  702. package/dist/index.d.ts +174 -0
  703. package/dist/index.js +358 -0
  704. package/dist/parallel-scan.d.ts +66 -0
  705. package/dist/parallel-scan.js +227 -0
  706. package/dist/registry.d.ts +17 -0
  707. package/dist/registry.js +118 -0
  708. package/dist/rules/glob.d.ts +5 -0
  709. package/dist/rules/glob.js +76 -0
  710. package/dist/rules/suppressions.d.ts +23 -0
  711. package/dist/rules/suppressions.js +136 -0
  712. package/dist/rules/tiers.d.ts +23 -0
  713. package/dist/rules/tiers.js +341 -0
  714. package/dist/scan-worker.d.ts +1 -0
  715. package/dist/scan-worker.js +61 -0
  716. package/dist/scan.d.ts +24 -0
  717. package/dist/scan.js +558 -0
  718. package/dist/semantic/contracts.d.ts +10 -0
  719. package/dist/semantic/contracts.js +141 -0
  720. package/dist/semantic/diagnostics.d.ts +29 -0
  721. package/dist/semantic/diagnostics.js +25 -0
  722. package/dist/semantic/eog.d.ts +56 -0
  723. package/dist/semantic/eog.js +545 -0
  724. package/dist/semantic/imports.d.ts +88 -0
  725. package/dist/semantic/imports.js +246 -0
  726. package/dist/semantic/index.d.ts +2 -0
  727. package/dist/semantic/index.js +8 -0
  728. package/dist/semantic/inheritance.d.ts +33 -0
  729. package/dist/semantic/inheritance.js +137 -0
  730. package/dist/semantic/model.d.ts +95 -0
  731. package/dist/semantic/model.js +232 -0
  732. package/dist/semantic/taint-tracker.d.ts +49 -0
  733. package/dist/semantic/taint-tracker.js +410 -0
  734. package/dist/semantic/types.d.ts +119 -0
  735. package/dist/semantic/types.js +18 -0
  736. package/dist/severity.d.ts +10 -0
  737. package/dist/severity.js +78 -0
  738. package/package.json +52 -0
@@ -0,0 +1,7 @@
1
+ import type { ScanResult } from '../index';
2
+ export declare class DivisionBeforeMultiplicationDetector {
3
+ readonly id = "division-before-multiplication";
4
+ readonly patternKey = "division-before-multiplication";
5
+ readonly supportedAstKinds: ("parser" | "solc")[];
6
+ scanAst(ast: any, file: string, sourceText?: string): ScanResult[];
7
+ }
@@ -0,0 +1,303 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.DivisionBeforeMultiplicationDetector = void 0;
4
+ const RULE_ID = 'division-before-multiplication';
5
+ class DivisionBeforeMultiplicationDetector {
6
+ id = RULE_ID;
7
+ patternKey = RULE_ID;
8
+ supportedAstKinds = ['parser', 'solc'];
9
+ scanAst(ast, file, sourceText) {
10
+ if (!ast || typeof ast !== 'object')
11
+ return [];
12
+ const findings = [];
13
+ const lineOffsets = buildLineOffsets(sourceText);
14
+ walk(ast, {}, (node, context) => {
15
+ if (!isBinary(node, '*'))
16
+ return;
17
+ if (isConstantExpression(node))
18
+ return;
19
+ if (!hasRiskyDivision(getLeft(node)) && !hasRiskyDivision(getRight(node)))
20
+ return;
21
+ if (hasRiskyMultiplication(getLeft(node)) || hasRiskyMultiplication(getRight(node)))
22
+ return;
23
+ findings.push(buildFinding(file, node, lineOffsets, {
24
+ contractName: context.contractName || '',
25
+ functionName: context.functionName || '',
26
+ }, sourceText));
27
+ });
28
+ return findings;
29
+ }
30
+ }
31
+ exports.DivisionBeforeMultiplicationDetector = DivisionBeforeMultiplicationDetector;
32
+ function walk(node, context, visit) {
33
+ if (!node || typeof node !== 'object')
34
+ return;
35
+ const nextContext = updateContext(node, context);
36
+ visit(node, nextContext);
37
+ for (const child of childrenOf(node)) {
38
+ walk(child, nextContext, visit);
39
+ }
40
+ }
41
+ function updateContext(node, context) {
42
+ if (isNode(node, 'ContractDefinition')) {
43
+ return {
44
+ ...context,
45
+ contractName: getName(node),
46
+ };
47
+ }
48
+ if (isNode(node, 'FunctionDefinition')) {
49
+ return {
50
+ ...context,
51
+ functionName: getName(node),
52
+ };
53
+ }
54
+ return context;
55
+ }
56
+ function buildFinding(file, node, lineOffsets, context, sourceText) {
57
+ const loc = getLoc(node, lineOffsets);
58
+ const endLoc = getEndLoc(node, lineOffsets);
59
+ const line = loc?.line || 0;
60
+ const column = loc?.column || 0;
61
+ const endLine = endLoc?.line || line;
62
+ const endColumn = endLoc?.column;
63
+ const source = sourceText ? getSourceSnippet(node, sourceText) : undefined;
64
+ return {
65
+ file,
66
+ contract: context.contractName,
67
+ 'function': context.functionName,
68
+ line,
69
+ endLine,
70
+ column,
71
+ endColumn,
72
+ pattern: RULE_ID,
73
+ confidence: 'high',
74
+ ruleId: RULE_ID,
75
+ severity: 'low',
76
+ message: `Division before multiplication in function '${context.functionName}' can magnify Solidity integer truncation and cause precision loss.`,
77
+ contractName: context.contractName,
78
+ functionName: context.functionName,
79
+ sourceLocation: { line, column },
80
+ trace: 'division-before-later-multiplication',
81
+ findingId: '',
82
+ contractHash: '',
83
+ source,
84
+ };
85
+ }
86
+ function isBinary(node, operator) {
87
+ return isNode(node, 'BinaryOperation') && getOperator(node) === operator;
88
+ }
89
+ function getLeft(node) {
90
+ return node?.left ?? node?.leftExpression;
91
+ }
92
+ function getRight(node) {
93
+ return node?.right ?? node?.rightExpression;
94
+ }
95
+ function getOperator(node) {
96
+ return node?.operator || '';
97
+ }
98
+ function hasRiskyMultiplication(node) {
99
+ const current = unwrapExpression(node);
100
+ if (!current || typeof current !== 'object')
101
+ return false;
102
+ if (isBinary(current, '*') && !isConstantExpression(current) && (hasRiskyDivision(getLeft(current)) || hasRiskyDivision(getRight(current)))) {
103
+ return true;
104
+ }
105
+ return expressionChildrenOf(current).some(hasRiskyMultiplication);
106
+ }
107
+ function hasRiskyDivision(node) {
108
+ const current = unwrapExpression(node);
109
+ if (!current || typeof current !== 'object')
110
+ return false;
111
+ if (isBinary(current, '/')) {
112
+ return !isSafeDivision(current);
113
+ }
114
+ return expressionChildrenOf(current).some(hasRiskyDivision);
115
+ }
116
+ function isSafeDivision(node) {
117
+ const numerator = unwrapExpression(getLeft(node));
118
+ const denominator = unwrapExpression(getRight(node));
119
+ if (isConstantExpression(node))
120
+ return true;
121
+ if (isNumericLiteral(denominator, '1'))
122
+ return true;
123
+ if (containsMultiplicativeFactor(numerator, denominator))
124
+ return true;
125
+ return false;
126
+ }
127
+ function containsMultiplicativeFactor(node, factor) {
128
+ const current = unwrapExpression(node);
129
+ const expected = expressionKey(factor);
130
+ if (!current || !expected)
131
+ return false;
132
+ if (expressionKey(current) === expected)
133
+ return true;
134
+ if (isBinary(current, '*')) {
135
+ return containsMultiplicativeFactor(getLeft(current), factor) || containsMultiplicativeFactor(getRight(current), factor);
136
+ }
137
+ return false;
138
+ }
139
+ function expressionChildrenOf(node) {
140
+ const current = unwrapExpression(node);
141
+ if (!current || typeof current !== 'object')
142
+ return [];
143
+ if (isNode(current, 'BinaryOperation')) {
144
+ return [getLeft(current), getRight(current)].filter(Boolean);
145
+ }
146
+ if (isNode(current, 'Conditional')) {
147
+ return [current.condition, current.trueExpression, current.falseExpression].filter(Boolean);
148
+ }
149
+ if (isNode(current, 'UnaryOperation')) {
150
+ return [current.subExpression].filter(Boolean);
151
+ }
152
+ if (isNode(current, 'FunctionCall')) {
153
+ return [current.expression, ...(current.arguments || [])].filter(Boolean);
154
+ }
155
+ if (isNode(current, 'IndexAccess')) {
156
+ return [current.base, current.index, current.baseExpression, current.indexExpression].filter(Boolean);
157
+ }
158
+ if (isNode(current, 'MemberAccess')) {
159
+ return [current.expression].filter(Boolean);
160
+ }
161
+ return [];
162
+ }
163
+ function isConstantExpression(node) {
164
+ const current = unwrapExpression(node);
165
+ if (!current || typeof current !== 'object')
166
+ return false;
167
+ if (isLiteral(current))
168
+ return true;
169
+ if (isNode(current, 'BinaryOperation')) {
170
+ return isConstantExpression(getLeft(current)) && isConstantExpression(getRight(current));
171
+ }
172
+ if (isNode(current, 'UnaryOperation')) {
173
+ return isConstantExpression(current.subExpression);
174
+ }
175
+ return false;
176
+ }
177
+ function isLiteral(node) {
178
+ return isNode(node, 'NumberLiteral') || isNode(node, 'BooleanLiteral') || isNode(node, 'StringLiteral') || isNode(node, 'HexLiteral') || isNode(node, 'Literal');
179
+ }
180
+ function isNumericLiteral(node, expected) {
181
+ const current = unwrapExpression(node);
182
+ const value = current?.number ?? current?.value ?? current?.hexValue;
183
+ return isLiteral(current) && String(value) === expected;
184
+ }
185
+ function expressionKey(node) {
186
+ const current = unwrapExpression(node);
187
+ if (!current || typeof current !== 'object')
188
+ return '';
189
+ if (isNode(current, 'Identifier')) {
190
+ return `id:${current.name || ''}`;
191
+ }
192
+ if (isLiteral(current)) {
193
+ const value = current.number ?? current.value ?? current.hexValue ?? '';
194
+ return `lit:${value}`;
195
+ }
196
+ if (isNode(current, 'MemberAccess')) {
197
+ return `member:${expressionKey(current.expression)}.${current.memberName || ''}`;
198
+ }
199
+ if (isNode(current, 'IndexAccess')) {
200
+ return `index:${expressionKey(current.base || current.baseExpression)}[${expressionKey(current.index || current.indexExpression)}]`;
201
+ }
202
+ if (isNode(current, 'BinaryOperation')) {
203
+ return `bin:${getOperator(current)}(${expressionKey(getLeft(current))},${expressionKey(getRight(current))})`;
204
+ }
205
+ return '';
206
+ }
207
+ function unwrapExpression(node) {
208
+ let current = node;
209
+ while (isNode(current, 'TupleExpression')) {
210
+ const components = current?.components;
211
+ if (!Array.isArray(components) || components.length !== 1)
212
+ break;
213
+ current = components[0];
214
+ }
215
+ return current;
216
+ }
217
+ function isNode(node, kind) {
218
+ return node?.type === kind || node?.nodeType === kind;
219
+ }
220
+ function getName(node) {
221
+ return node?.name || '';
222
+ }
223
+ function childrenOf(node) {
224
+ if (!node || typeof node !== 'object')
225
+ return [];
226
+ const children = [];
227
+ for (const [key, value] of Object.entries(node)) {
228
+ if (key === 'loc' || key === 'src' || key === 'range' || key === 'typeDescriptions')
229
+ continue;
230
+ if (Array.isArray(value)) {
231
+ children.push(...value.filter(item => item && typeof item === 'object'));
232
+ }
233
+ else if (value && typeof value === 'object') {
234
+ children.push(value);
235
+ }
236
+ }
237
+ return children;
238
+ }
239
+ function buildLineOffsets(sourceText) {
240
+ if (sourceText === undefined)
241
+ return undefined;
242
+ const lineOffsets = [0];
243
+ let byteOffset = 0;
244
+ for (const char of sourceText) {
245
+ byteOffset += Buffer.byteLength(char, 'utf8');
246
+ if (char === '\n')
247
+ lineOffsets.push(byteOffset);
248
+ }
249
+ return lineOffsets;
250
+ }
251
+ function getLoc(node, lineOffsets) {
252
+ if (node?.loc?.start)
253
+ return node.loc.start;
254
+ if (!node?.src || !lineOffsets)
255
+ return undefined;
256
+ const offset = Number(String(node.src).split(':')[0]);
257
+ if (!Number.isFinite(offset) || offset < 0)
258
+ return undefined;
259
+ let lineIndex = 0;
260
+ for (let i = 0; i < lineOffsets.length; i++) {
261
+ if (lineOffsets[i] <= offset)
262
+ lineIndex = i;
263
+ else
264
+ break;
265
+ }
266
+ return { line: lineIndex + 1, column: offset - lineOffsets[lineIndex] };
267
+ }
268
+ function getEndLoc(node, lineOffsets) {
269
+ if (node?.loc?.end) {
270
+ return node.loc.end;
271
+ }
272
+ const range = getSourceRange(node);
273
+ if (!range || !lineOffsets)
274
+ return undefined;
275
+ let lineIndex = 0;
276
+ for (let i = 0; i < lineOffsets.length; i++) {
277
+ if (lineOffsets[i] <= range.end)
278
+ lineIndex = i;
279
+ else
280
+ break;
281
+ }
282
+ return { line: lineIndex + 1, column: range.end - lineOffsets[lineIndex] };
283
+ }
284
+ function getSourceSnippet(node, sourceText) {
285
+ const range = getSourceRange(node);
286
+ if (!range)
287
+ return undefined;
288
+ return sourceText.slice(range.start, range.end);
289
+ }
290
+ function getSourceRange(node) {
291
+ if (Array.isArray(node?.range) && node.range.length >= 2) {
292
+ return { start: Number(node.range[0]), end: Number(node.range[1]) + 1 };
293
+ }
294
+ if (!node?.src)
295
+ return undefined;
296
+ const [startText, lengthText] = String(node.src).split(':');
297
+ const start = Number(startText);
298
+ const length = Number(lengthText);
299
+ if (!Number.isFinite(start) || !Number.isFinite(length) || start < 0 || length < 0)
300
+ return undefined;
301
+ return { start, end: start + length };
302
+ }
303
+ //# sourceMappingURL=division-before-multiplication.js.map
@@ -0,0 +1,26 @@
1
+ import type { ScanResult } from '../index';
2
+ export declare class Dn404MirrorAccessControlDetector {
3
+ readonly id = "dn404-mirror-access-control";
4
+ readonly patternKey = "dn404-mirror-access-control";
5
+ readonly supportedAstKinds: "parser"[];
6
+ readonly descriptor: {
7
+ id: string;
8
+ shortDescription: string;
9
+ helpUri: string;
10
+ defaultSeverity: "high";
11
+ help: string;
12
+ };
13
+ private file;
14
+ private findings;
15
+ private current;
16
+ setFile(file: string): void;
17
+ getFindings(): ScanResult[];
18
+ ContractDefinition(node: any): void;
19
+ ['ContractDefinition:exit'](): void;
20
+ StateVariableDeclaration(node: any): void;
21
+ ModifierDefinition(node: any): void;
22
+ FunctionDefinition(node: any): void;
23
+ private analyzeContract;
24
+ private isDn404MirrorSurface;
25
+ private hasBaseCallerGuardBeforeMutation;
26
+ }
@@ -0,0 +1,315 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.Dn404MirrorAccessControlDetector = void 0;
4
+ const ast_1 = require("./_common/ast");
5
+ const access_control_1 = require("./_common/access-control");
6
+ const RULE_ID = 'dn404-mirror-access-control';
7
+ const MIRROR_HOOKS = new Set(['transferFromNFT', 'approveNFT', 'setApprovalForAll']);
8
+ const DN404_SPECIFIC_HOOKS = new Set(['transferFromNFT', 'approveNFT']);
9
+ const MIRROR_MUTATOR_CALLS = new Set(['_transfer', '_approve', '_setApprovalForAll']);
10
+ const ASSIGNMENT_OPERATORS = new Set([
11
+ '=', '+=', '-=', '*=', '/=', '%=', '&=', '|=', '^=', '<<=', '>>=', '>>>=',
12
+ ]);
13
+ class Dn404MirrorAccessControlDetector {
14
+ id = RULE_ID;
15
+ patternKey = RULE_ID;
16
+ supportedAstKinds = ['parser'];
17
+ descriptor = {
18
+ id: RULE_ID,
19
+ shortDescription: 'DN404 mirror hook missing paired-base caller guard.',
20
+ helpUri: 'https://snovon.com/',
21
+ defaultSeverity: 'high',
22
+ help: 'Flags DN404 mirror transfer and approval hooks that mutate NFT mirror state before checking the caller is the paired base/ERC20 contract.',
23
+ };
24
+ file = '';
25
+ findings = [];
26
+ current = null;
27
+ setFile(file) {
28
+ this.file = file;
29
+ this.findings = [];
30
+ this.current = null;
31
+ }
32
+ getFindings() {
33
+ return this.findings;
34
+ }
35
+ ContractDefinition(node) {
36
+ const name = (0, ast_1.getName)(node);
37
+ const cues = new Set();
38
+ if (name.toLowerCase().includes('dn404'))
39
+ cues.add('contract-name');
40
+ if (name.toLowerCase().includes('mirror'))
41
+ cues.add('mirror-name');
42
+ this.current = {
43
+ node,
44
+ name,
45
+ kind: String(node.kind || node.contractKind || '').toLowerCase(),
46
+ stateVars: new Set(),
47
+ functions: [],
48
+ modifiers: new Map(),
49
+ dn404Cues: cues,
50
+ };
51
+ }
52
+ ['ContractDefinition:exit']() {
53
+ if (this.current)
54
+ this.analyzeContract(this.current);
55
+ this.current = null;
56
+ }
57
+ StateVariableDeclaration(node) {
58
+ if (!this.current)
59
+ return;
60
+ for (const variable of node.variables || []) {
61
+ const name = (0, ast_1.getName)(variable);
62
+ if (!name)
63
+ continue;
64
+ this.current.stateVars.add(name);
65
+ if (isDn404BaseName(name))
66
+ this.current.dn404Cues.add('base-state');
67
+ }
68
+ }
69
+ ModifierDefinition(node) {
70
+ if (!this.current)
71
+ return;
72
+ const name = (0, ast_1.getName)(node);
73
+ if (name)
74
+ this.current.modifiers.set(name, node);
75
+ }
76
+ FunctionDefinition(node) {
77
+ if (!this.current)
78
+ return;
79
+ const name = (0, ast_1.getName)(node);
80
+ this.current.functions.push(node);
81
+ if (name === 'linkMirrorContract' || name === '_getDN404Storage' || name === 'sisterERC20') {
82
+ this.current.dn404Cues.add(name);
83
+ }
84
+ }
85
+ analyzeContract(contract) {
86
+ if (contract.kind === 'interface' || contract.kind === 'library')
87
+ return;
88
+ for (const fn of contract.functions) {
89
+ const functionName = (0, ast_1.getName)(fn);
90
+ if (!MIRROR_HOOKS.has(functionName))
91
+ continue;
92
+ if (!isExternallyCallable(fn))
93
+ continue;
94
+ if (isReadOnly(fn))
95
+ continue;
96
+ if (!fn.body)
97
+ continue;
98
+ if (!this.isDn404MirrorSurface(contract, functionName))
99
+ continue;
100
+ const mutation = firstMirrorMutation(fn.body, contract.stateVars);
101
+ if (!mutation)
102
+ continue;
103
+ if (this.hasBaseCallerGuardBeforeMutation(fn, contract, mutation))
104
+ continue;
105
+ const loc = (0, ast_1.assertLoc)(fn, contract.node);
106
+ this.findings.push({
107
+ file: this.file,
108
+ contract: contract.name || '<anonymous>',
109
+ 'function': functionName || '<anonymous>',
110
+ line: loc.line,
111
+ endLine: loc.endLine,
112
+ column: loc.column,
113
+ pattern: RULE_ID,
114
+ confidence: 'high',
115
+ ruleId: RULE_ID,
116
+ severity: 'high',
117
+ message: `DN404 mirror access-control gap in '${contract.name}.${functionName}': externally callable mirror hook mutates NFT state before requiring the paired base/ERC20 contract as caller.`,
118
+ rationale: 'Matches the filx-class DN404 mirror failure where transfer or approval hooks are callable by arbitrary accounts instead of being gated to the paired base/ERC20 contract.',
119
+ suggestedFix: 'Require msg.sender, _msgSender(), or an equivalent caller identity to equal the paired base/ERC20 address before the mirror state mutation; put the guard in the hook or in a modifier that executes before the hook body.',
120
+ contractName: contract.name || '<anonymous>',
121
+ functionName: functionName || '<anonymous>',
122
+ sourceLocation: { line: loc.line, column: loc.column },
123
+ findingId: '',
124
+ contractHash: '',
125
+ });
126
+ }
127
+ }
128
+ isDn404MirrorSurface(contract, functionName) {
129
+ if (DN404_SPECIFIC_HOOKS.has(functionName))
130
+ return true;
131
+ return contract.dn404Cues.size > 0;
132
+ }
133
+ hasBaseCallerGuardBeforeMutation(fn, contract, mutation) {
134
+ if ((0, access_control_1.hasRecognisedAccessControlModifier)(fn))
135
+ return true;
136
+ for (const modifier of fn.modifiers || []) {
137
+ const modifierName = getModifierName(modifier);
138
+ const modifierDefinition = modifierName ? contract.modifiers.get(modifierName) : null;
139
+ if (modifierDefinition && modifierHasBaseCallerGuardBeforePlaceholder(modifierDefinition))
140
+ return true;
141
+ }
142
+ return blockHasBaseCallerGuardBeforeMutation(fn.body, mutation);
143
+ }
144
+ }
145
+ exports.Dn404MirrorAccessControlDetector = Dn404MirrorAccessControlDetector;
146
+ function isExternallyCallable(fn) {
147
+ const kind = String(fn.kind || fn.functionKind || '').toLowerCase();
148
+ if (kind === 'constructor' || fn.isConstructor)
149
+ return false;
150
+ const visibility = String(fn.visibility || '').toLowerCase();
151
+ return visibility === 'public' || visibility === 'external';
152
+ }
153
+ function isReadOnly(fn) {
154
+ const mutability = String(fn.stateMutability || '').toLowerCase();
155
+ return mutability === 'view' || mutability === 'pure';
156
+ }
157
+ function firstMirrorMutation(body, stateVars) {
158
+ for (const stmt of getStatements(body)) {
159
+ const mutation = findFirst(stmt, node => isMirrorMutation(node, stateVars));
160
+ if (mutation)
161
+ return mutation;
162
+ }
163
+ return null;
164
+ }
165
+ function blockHasBaseCallerGuardBeforeMutation(body, mutation) {
166
+ for (const stmt of getStatements(body)) {
167
+ if (containsNode(stmt, mutation))
168
+ return false;
169
+ if (statementIsBaseCallerGuard(stmt))
170
+ return true;
171
+ }
172
+ return false;
173
+ }
174
+ function modifierHasBaseCallerGuardBeforePlaceholder(modifier) {
175
+ for (const stmt of getStatements(modifier.body)) {
176
+ if ((0, ast_1.isNode)(stmt, 'PlaceholderStatement'))
177
+ return false;
178
+ if (statementIsBaseCallerGuard(stmt))
179
+ return true;
180
+ }
181
+ return false;
182
+ }
183
+ function statementIsBaseCallerGuard(stmt) {
184
+ if (!(0, ast_1.isNode)(stmt, 'ExpressionStatement'))
185
+ return false;
186
+ const expr = stmt.expression;
187
+ if (!(0, ast_1.isNode)(expr, 'FunctionCall'))
188
+ return false;
189
+ const callee = getCalleeName(expr.expression).toLowerCase();
190
+ if (callee !== 'require' && callee !== 'assert')
191
+ return false;
192
+ return (expr.arguments || []).some((arg) => conditionExpressesBaseCallerGuard(arg));
193
+ }
194
+ function conditionExpressesBaseCallerGuard(expr) {
195
+ if ((0, access_control_1.requireExpressesAccessControl)(expr, isDn404BaseName))
196
+ return true;
197
+ if (!expr || typeof expr !== 'object')
198
+ return false;
199
+ if ((0, ast_1.isNode)(expr, 'BinaryOperation') && (expr.operator === '==' || expr.operator === '===')) {
200
+ const left = expr.left || expr.leftExpression;
201
+ const right = expr.right || expr.rightExpression;
202
+ if ((0, access_control_1.isCallerIdentityExpression)(left) && (0, access_control_1.isPrivilegedReference)(right, isDn404BaseName))
203
+ return true;
204
+ if ((0, access_control_1.isCallerIdentityExpression)(right) && (0, access_control_1.isPrivilegedReference)(left, isDn404BaseName))
205
+ return true;
206
+ }
207
+ if ((0, ast_1.isNode)(expr, 'BinaryOperation') && (expr.operator === '&&' || expr.operator === '||')) {
208
+ return conditionExpressesBaseCallerGuard(expr.left || expr.leftExpression)
209
+ || conditionExpressesBaseCallerGuard(expr.right || expr.rightExpression);
210
+ }
211
+ if ((0, ast_1.isNode)(expr, 'TupleExpression')) {
212
+ return (expr.components || []).some((child) => conditionExpressesBaseCallerGuard(child));
213
+ }
214
+ return false;
215
+ }
216
+ function isDn404BaseName(name) {
217
+ const normalized = name.replace(/^_+/, '').toLowerCase();
218
+ return normalized === 'base'
219
+ || normalized === 'baseerc20'
220
+ || normalized === 'sistererc20'
221
+ || normalized === 'dn404'
222
+ || normalized === 'erc20';
223
+ }
224
+ function isMirrorMutation(node, stateVars) {
225
+ if (isAssignment(node)) {
226
+ const root = assignmentRootName(node.left || node.leftExpression || node.leftHandSide);
227
+ return stateVars.size === 0 ? Boolean(root) : stateVars.has(root);
228
+ }
229
+ if ((0, ast_1.isNode)(node, 'UnaryOperation') && (node.operator === '++' || node.operator === '--' || node.operator === 'delete')) {
230
+ const root = assignmentRootName(node.subExpression);
231
+ return stateVars.size === 0 ? Boolean(root) : stateVars.has(root);
232
+ }
233
+ if ((0, ast_1.isNode)(node, 'FunctionCall')) {
234
+ return MIRROR_MUTATOR_CALLS.has(getCalleeName(node.expression));
235
+ }
236
+ return false;
237
+ }
238
+ function isAssignment(node) {
239
+ if (!(0, ast_1.isNode)(node, 'BinaryOperation') && !(0, ast_1.isNode)(node, 'Assignment'))
240
+ return false;
241
+ return ASSIGNMENT_OPERATORS.has(String(node.operator || ''));
242
+ }
243
+ function assignmentRootName(node) {
244
+ if (!node || typeof node !== 'object')
245
+ return '';
246
+ if ((0, ast_1.isNode)(node, 'Identifier'))
247
+ return (0, ast_1.getName)(node);
248
+ if ((0, ast_1.isNode)(node, 'IndexAccess'))
249
+ return assignmentRootName(node.base || node.baseExpression);
250
+ if ((0, ast_1.isNode)(node, 'MemberAccess'))
251
+ return assignmentRootName(node.expression) || String(node.memberName || '');
252
+ return '';
253
+ }
254
+ function getStatements(body) {
255
+ if (!body || typeof body !== 'object')
256
+ return [];
257
+ return Array.isArray(body.statements) ? body.statements : [];
258
+ }
259
+ function getModifierName(modifier) {
260
+ if (!modifier)
261
+ return '';
262
+ if (typeof modifier === 'string')
263
+ return modifier;
264
+ if (typeof modifier.name === 'string')
265
+ return modifier.name;
266
+ if (modifier.name && typeof modifier.name.name === 'string')
267
+ return modifier.name.name;
268
+ if (modifier.modifierName && typeof modifier.modifierName.name === 'string')
269
+ return modifier.modifierName.name;
270
+ return '';
271
+ }
272
+ function getCalleeName(expr) {
273
+ if (!expr)
274
+ return '';
275
+ if ((0, ast_1.isNode)(expr, 'Identifier'))
276
+ return (0, ast_1.getName)(expr);
277
+ if ((0, ast_1.isNode)(expr, 'MemberAccess'))
278
+ return String(expr.memberName || '');
279
+ return '';
280
+ }
281
+ function containsNode(root, target) {
282
+ return Boolean(findFirst(root, node => node === target));
283
+ }
284
+ function findFirst(node, predicate) {
285
+ if (!node || typeof node !== 'object')
286
+ return null;
287
+ if (predicate(node))
288
+ return node;
289
+ for (const child of childrenOf(node)) {
290
+ const found = findFirst(child, predicate);
291
+ if (found)
292
+ return found;
293
+ }
294
+ return null;
295
+ }
296
+ function childrenOf(node) {
297
+ if (!node || typeof node !== 'object')
298
+ return [];
299
+ const out = [];
300
+ for (const [key, value] of Object.entries(node)) {
301
+ if (key === 'loc' || key === 'range' || key === 'src')
302
+ continue;
303
+ if (Array.isArray(value)) {
304
+ for (const item of value) {
305
+ if (item && typeof item === 'object')
306
+ out.push(item);
307
+ }
308
+ }
309
+ else if (value && typeof value === 'object') {
310
+ out.push(value);
311
+ }
312
+ }
313
+ return out;
314
+ }
315
+ //# sourceMappingURL=dn404-mirror-access-control.js.map
@@ -0,0 +1,29 @@
1
+ import type { ScanResult } from '../index';
2
+ export declare class DogeFlashloanDetector {
3
+ readonly id = "doge-flashloan";
4
+ readonly patternKey = "doge-flashloan";
5
+ readonly supportedAstKinds: ("parser" | "solc")[];
6
+ readonly descriptor: {
7
+ id: string;
8
+ shortDescription: string;
9
+ helpUri: string;
10
+ defaultSeverity: "high";
11
+ help: string;
12
+ };
13
+ private currentFile;
14
+ private lineOffsets;
15
+ private findings;
16
+ private currentContract;
17
+ private fn;
18
+ setFile(file: string): void;
19
+ setSourceText(sourceText?: string): void;
20
+ getFindings(): ScanResult[];
21
+ ContractDefinition(node: any): void;
22
+ ContractDefinition_post(_node: any): void;
23
+ ['ContractDefinition:exit'](node: any): void;
24
+ FunctionDefinition(node: any): void;
25
+ FunctionDefinition_post(_node: any): void;
26
+ ['FunctionDefinition:exit'](node: any): void;
27
+ FunctionCall(node: any): void;
28
+ private makeFinding;
29
+ }