Slither – a Solidity static analysis framework

Summary: Trail of Bits open-sourced Slither, described as the first open-source static analysis framework for Solidity, which it says can find real vulnerabilities in a few seconds without user intervention. The core engine includes an intermediate representation called SlithIR with taint tracking, on top of which detectors - including ones for reentrancy and suicidal contracts - can be built, and it ships with printers for contract summaries, function summaries, inheritance graphs, and authorization overviews.
What you should know: The tool runs on each commit with no configuration, so a team can check that it is not adding new bugs before they reach a deployed contract - and Trail of Bits states it uses Slither in all of its own Solidity security reviews.

Read the original at Trail of Bits Blog ↗