Submit Search
Upload
Static Analysis for Vyper by Evgeny Marchenko, Lead Developer at SmartDec
•
1 like
•
195 views
HackenProof
Follow
SmartDec Lead Developer Evgeny Marchenko is introducing Static Analysis for Vyper
Read less
Read more
Engineering
Report
Share
Report
Share
1 of 16
Download now
Download to read offline
Recommended
Smart contract vulnerability classification by Ivan Ivanitskiy, Chief Analyti...
Smart contract vulnerability classification by Ivan Ivanitskiy, Chief Analyti...
HackenProof
Introduction to Blockchain Tests Workshop at The National Software Testing C...
Introduction to Blockchain Tests Workshop at The National Software Testing C...
Rafaela Azevedo
Magento technical resources
Magento technical resources
Magetips
CROSSMINER Project at OW2con'19
CROSSMINER Project at OW2con'19
OW2
Continuum Analytics and Python
Continuum Analytics and Python
Travis Oliphant
PyData Frankfurt - (Efficient) Data Exchange with "Foreign" Ecosystems
PyData Frankfurt - (Efficient) Data Exchange with "Foreign" Ecosystems
Uwe Korn
50 Shades of Fail KScope16
50 Shades of Fail KScope16
Christian Berg
第1回バイオインフォマティクスデータ可視化セミナー@Riken
第1回バイオインフォマティクスデータ可視化セミナー@Riken
Keiichiro Ono
Recommended
Smart contract vulnerability classification by Ivan Ivanitskiy, Chief Analyti...
Smart contract vulnerability classification by Ivan Ivanitskiy, Chief Analyti...
HackenProof
Introduction to Blockchain Tests Workshop at The National Software Testing C...
Introduction to Blockchain Tests Workshop at The National Software Testing C...
Rafaela Azevedo
Magento technical resources
Magento technical resources
Magetips
CROSSMINER Project at OW2con'19
CROSSMINER Project at OW2con'19
OW2
Continuum Analytics and Python
Continuum Analytics and Python
Travis Oliphant
PyData Frankfurt - (Efficient) Data Exchange with "Foreign" Ecosystems
PyData Frankfurt - (Efficient) Data Exchange with "Foreign" Ecosystems
Uwe Korn
50 Shades of Fail KScope16
50 Shades of Fail KScope16
Christian Berg
第1回バイオインフォマティクスデータ可視化セミナー@Riken
第1回バイオインフォマティクスデータ可視化セミナー@Riken
Keiichiro Ono
The Internet of Trust and a New Frontier for Exploration
The Internet of Trust and a New Frontier for Exploration
l2myowndevices
PyData Texas 2015 Keynote
PyData Texas 2015 Keynote
Peter Wang
Open Source Big Graph Analytics on Neo4j with Apache Spark
Open Source Big Graph Analytics on Neo4j with Apache Spark
Kenny Bastani
ScalaClean at ScalaSphere 2019
ScalaClean at ScalaSphere 2019
Rory Graves
Speaking at Tech meetups/conferences for Junior Devs
Speaking at Tech meetups/conferences for Junior Devs
yeokm1
Beyond the Science Gateway
Beyond the Science Gateway
Boston Consulting Group
How to improve the quality of your application
How to improve the quality of your application
EUR ING Ioannis Kolaxis MSc
Group 3 slide presentation
Group 3 slide presentation
Michael Young
What is cool with Domino V10, Proton and Node.JS, and why would I use it in ...
What is cool with Domino V10, Proton and Node.JS, and why would I use it in ...
Heiko Voigt
Performance tuning
Performance tuning
Eric Phan
What is the data analytics stack?
What is the data analytics stack?
George Mount
Requirements the Last Bottleneck
Requirements the Last Bottleneck
Karwin Software Solutions LLC
8base Hyperledger Miami Meetup Presentation
8base Hyperledger Miami Meetup Presentation
8base
8base Hyperledger Miami Meetup 20180719
8base Hyperledger Miami Meetup 20180719
Oscar Perez
Игорь Фесенко "Direction of C# as a High-Performance Language"
Игорь Фесенко "Direction of C# as a High-Performance Language"
Fwdays
Code review
Code review
Raquel Pau
Prototyping like it is 2022
Prototyping like it is 2022
Michael Yagudaev
LJC 4/21"Easy Debugging of Java Microservices Running on Kubernetes with Tele...
LJC 4/21"Easy Debugging of Java Microservices Running on Kubernetes with Tele...
Daniel Bryant
What schools should be teaching IT students
What schools should be teaching IT students
Andy Lester
Maintainable Machine Learning Products
Maintainable Machine Learning Products
Andrew Musselman
Top Rated Call Girls In chittoor 📱 {7001035870} VIP Escorts chittoor
Top Rated Call Girls In chittoor 📱 {7001035870} VIP Escorts chittoor
dharasingh5698
Hazard Identification (HAZID) vs. Hazard and Operability (HAZOP): A Comparati...
Hazard Identification (HAZID) vs. Hazard and Operability (HAZOP): A Comparati...
soginsider
More Related Content
Similar to Static Analysis for Vyper by Evgeny Marchenko, Lead Developer at SmartDec
The Internet of Trust and a New Frontier for Exploration
The Internet of Trust and a New Frontier for Exploration
l2myowndevices
PyData Texas 2015 Keynote
PyData Texas 2015 Keynote
Peter Wang
Open Source Big Graph Analytics on Neo4j with Apache Spark
Open Source Big Graph Analytics on Neo4j with Apache Spark
Kenny Bastani
ScalaClean at ScalaSphere 2019
ScalaClean at ScalaSphere 2019
Rory Graves
Speaking at Tech meetups/conferences for Junior Devs
Speaking at Tech meetups/conferences for Junior Devs
yeokm1
Beyond the Science Gateway
Beyond the Science Gateway
Boston Consulting Group
How to improve the quality of your application
How to improve the quality of your application
EUR ING Ioannis Kolaxis MSc
Group 3 slide presentation
Group 3 slide presentation
Michael Young
What is cool with Domino V10, Proton and Node.JS, and why would I use it in ...
What is cool with Domino V10, Proton and Node.JS, and why would I use it in ...
Heiko Voigt
Performance tuning
Performance tuning
Eric Phan
What is the data analytics stack?
What is the data analytics stack?
George Mount
Requirements the Last Bottleneck
Requirements the Last Bottleneck
Karwin Software Solutions LLC
8base Hyperledger Miami Meetup Presentation
8base Hyperledger Miami Meetup Presentation
8base
8base Hyperledger Miami Meetup 20180719
8base Hyperledger Miami Meetup 20180719
Oscar Perez
Игорь Фесенко "Direction of C# as a High-Performance Language"
Игорь Фесенко "Direction of C# as a High-Performance Language"
Fwdays
Code review
Code review
Raquel Pau
Prototyping like it is 2022
Prototyping like it is 2022
Michael Yagudaev
LJC 4/21"Easy Debugging of Java Microservices Running on Kubernetes with Tele...
LJC 4/21"Easy Debugging of Java Microservices Running on Kubernetes with Tele...
Daniel Bryant
What schools should be teaching IT students
What schools should be teaching IT students
Andy Lester
Maintainable Machine Learning Products
Maintainable Machine Learning Products
Andrew Musselman
Similar to Static Analysis for Vyper by Evgeny Marchenko, Lead Developer at SmartDec
(20)
The Internet of Trust and a New Frontier for Exploration
The Internet of Trust and a New Frontier for Exploration
PyData Texas 2015 Keynote
PyData Texas 2015 Keynote
Open Source Big Graph Analytics on Neo4j with Apache Spark
Open Source Big Graph Analytics on Neo4j with Apache Spark
ScalaClean at ScalaSphere 2019
ScalaClean at ScalaSphere 2019
Speaking at Tech meetups/conferences for Junior Devs
Speaking at Tech meetups/conferences for Junior Devs
Beyond the Science Gateway
Beyond the Science Gateway
How to improve the quality of your application
How to improve the quality of your application
Group 3 slide presentation
Group 3 slide presentation
What is cool with Domino V10, Proton and Node.JS, and why would I use it in ...
What is cool with Domino V10, Proton and Node.JS, and why would I use it in ...
Performance tuning
Performance tuning
What is the data analytics stack?
What is the data analytics stack?
Requirements the Last Bottleneck
Requirements the Last Bottleneck
8base Hyperledger Miami Meetup Presentation
8base Hyperledger Miami Meetup Presentation
8base Hyperledger Miami Meetup 20180719
8base Hyperledger Miami Meetup 20180719
Игорь Фесенко "Direction of C# as a High-Performance Language"
Игорь Фесенко "Direction of C# as a High-Performance Language"
Code review
Code review
Prototyping like it is 2022
Prototyping like it is 2022
LJC 4/21"Easy Debugging of Java Microservices Running on Kubernetes with Tele...
LJC 4/21"Easy Debugging of Java Microservices Running on Kubernetes with Tele...
What schools should be teaching IT students
What schools should be teaching IT students
Maintainable Machine Learning Products
Maintainable Machine Learning Products
Recently uploaded
Top Rated Call Girls In chittoor 📱 {7001035870} VIP Escorts chittoor
Top Rated Call Girls In chittoor 📱 {7001035870} VIP Escorts chittoor
dharasingh5698
Hazard Identification (HAZID) vs. Hazard and Operability (HAZOP): A Comparati...
Hazard Identification (HAZID) vs. Hazard and Operability (HAZOP): A Comparati...
soginsider
Introduction to Serverless with AWS Lambda
Introduction to Serverless with AWS Lambda
Omar Fathy
Unit 1 - Soil Classification and Compaction.pdf
Unit 1 - Soil Classification and Compaction.pdf
RagavanV2
Call Girls Pimpri Chinchwad Call Me 7737669865 Budget Friendly No Advance Boo...
Call Girls Pimpri Chinchwad Call Me 7737669865 Budget Friendly No Advance Boo...
roncy bisnoi
22-prompt engineering noted slide shown.pdf
22-prompt engineering noted slide shown.pdf
203318pmpc
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
ssuser89054b
notes on Evolution Of Analytic Scalability.ppt
notes on Evolution Of Analytic Scalability.ppt
MsecMca
FEA Based Level 3 Assessment of Deformed Tanks with Fluid Induced Loads
FEA Based Level 3 Assessment of Deformed Tanks with Fluid Induced Loads
Arindam Chakraborty, Ph.D., P.E. (CA, TX)
Hostel management system project report..pdf
Hostel management system project report..pdf
Kamal Acharya
VIP Call Girls Palanpur 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Palanpur 7001035870 Whatsapp Number, 24/07 Booking
dharasingh5698
DC MACHINE-Motoring and generation, Armature circuit equation
DC MACHINE-Motoring and generation, Armature circuit equation
BhangaleSonal
(INDIRA) Call Girl Bhosari Call Now 8617697112 Bhosari Escorts 24x7
(INDIRA) Call Girl Bhosari Call Now 8617697112 Bhosari Escorts 24x7
Call Girls in Nagpur High Profile Call Girls
Double Revolving field theory-how the rotor develops torque
Double Revolving field theory-how the rotor develops torque
BhangaleSonal
Work-Permit-Receiver-in-Saudi-Aramco.pptx
Work-Permit-Receiver-in-Saudi-Aramco.pptx
JuliansyahHarahap1
FULL ENJOY Call Girls In Mahipalpur Delhi Contact Us 8377877756
FULL ENJOY Call Girls In Mahipalpur Delhi Contact Us 8377877756
dollysharma2066
(INDIRA) Call Girl Aurangabad Call Now 8617697112 Aurangabad Escorts 24x7
(INDIRA) Call Girl Aurangabad Call Now 8617697112 Aurangabad Escorts 24x7
Call Girls in Nagpur High Profile Call Girls
Integrated Test Rig For HTFE-25 - Neometrix
Integrated Test Rig For HTFE-25 - Neometrix
Neometrix_Engineering_Pvt_Ltd
UNIT - IV - Air Compressors and its Performance
UNIT - IV - Air Compressors and its Performance
sivaprakash250
Employee leave management system project.
Employee leave management system project.
Kamal Acharya
Recently uploaded
(20)
Top Rated Call Girls In chittoor 📱 {7001035870} VIP Escorts chittoor
Top Rated Call Girls In chittoor 📱 {7001035870} VIP Escorts chittoor
Hazard Identification (HAZID) vs. Hazard and Operability (HAZOP): A Comparati...
Hazard Identification (HAZID) vs. Hazard and Operability (HAZOP): A Comparati...
Introduction to Serverless with AWS Lambda
Introduction to Serverless with AWS Lambda
Unit 1 - Soil Classification and Compaction.pdf
Unit 1 - Soil Classification and Compaction.pdf
Call Girls Pimpri Chinchwad Call Me 7737669865 Budget Friendly No Advance Boo...
Call Girls Pimpri Chinchwad Call Me 7737669865 Budget Friendly No Advance Boo...
22-prompt engineering noted slide shown.pdf
22-prompt engineering noted slide shown.pdf
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
notes on Evolution Of Analytic Scalability.ppt
notes on Evolution Of Analytic Scalability.ppt
FEA Based Level 3 Assessment of Deformed Tanks with Fluid Induced Loads
FEA Based Level 3 Assessment of Deformed Tanks with Fluid Induced Loads
Hostel management system project report..pdf
Hostel management system project report..pdf
VIP Call Girls Palanpur 7001035870 Whatsapp Number, 24/07 Booking
VIP Call Girls Palanpur 7001035870 Whatsapp Number, 24/07 Booking
DC MACHINE-Motoring and generation, Armature circuit equation
DC MACHINE-Motoring and generation, Armature circuit equation
(INDIRA) Call Girl Bhosari Call Now 8617697112 Bhosari Escorts 24x7
(INDIRA) Call Girl Bhosari Call Now 8617697112 Bhosari Escorts 24x7
Double Revolving field theory-how the rotor develops torque
Double Revolving field theory-how the rotor develops torque
Work-Permit-Receiver-in-Saudi-Aramco.pptx
Work-Permit-Receiver-in-Saudi-Aramco.pptx
FULL ENJOY Call Girls In Mahipalpur Delhi Contact Us 8377877756
FULL ENJOY Call Girls In Mahipalpur Delhi Contact Us 8377877756
(INDIRA) Call Girl Aurangabad Call Now 8617697112 Aurangabad Escorts 24x7
(INDIRA) Call Girl Aurangabad Call Now 8617697112 Aurangabad Escorts 24x7
Integrated Test Rig For HTFE-25 - Neometrix
Integrated Test Rig For HTFE-25 - Neometrix
UNIT - IV - Air Compressors and its Performance
UNIT - IV - Air Compressors and its Performance
Employee leave management system project.
Employee leave management system project.
Static Analysis for Vyper by Evgeny Marchenko, Lead Developer at SmartDec
1.
Static Analysis for Vyper #blockchainhackers,
Prague 29.10.2018 Evgeny Marchenko SmartDec Lead Developer machenko@smartdec.net
2.
#blockchainhackers, Prague 29.10.2018 •
Yet another language • Python-like • Beginners-friendly Vyper Why would one use it?
3.
#blockchainhackers, Prague 29.10.2018 Improved
readability: • No inheritance or function overloading • No modifiers • No assembly Vyper vs Solidity What else?
4.
#blockchainhackers, Prague 29.10.2018 Improved
security: • No recursive calling or infinite-length loops • No integer overflow • Decimal fixed point numbers Vyper vs Solidity Great. And?
5.
#blockchainhackers, Prague 29.10.2018 Impressions: •
Less error-prone • Lacks some • Easier to analyze Vyper vs Solidity Does it help?
6.
#blockchainhackers, Prague 29.10.2018 •
Little documentation • Little to no community • Small toolbox Vyper disadvanages That’s not great =
7.
#blockchainhackers, Prague 29.10.2018 •
Linters / Syntax highlighters • Compiler / IDE • Frameworks Tools for Vyper Nice, but not enough
8.
#blockchainhackers, Prague 29.10.2018 •
Simple to use tool • Looks for bugs, code quality issues and some vulnerabilities • Provides detailed explanations SmartCheck How to use it?
9.
#blockchainhackers, Prague 29.10.2018 •
Supports Solidity and Vyper • Add sources for analysis • Check results on Web interface SmartCheck: UX Let’s try =)
10.
11.
12.
#blockchainhackers, Prague 29.10.2018 •
Parse with ANTLR and query with XPATH • That’s FAST! • Adding new rule takes an hour SmartCheck: engine
13.
#blockchainhackers, Prague 29.10.2018 •
Around 10 rules • Mostly EVM issues • Few Vyper-specific problems Vyper rules
14.
#blockchainhackers, Prague 29.10.2018 •
Awkward Python grammar • Little experience with Vyper • No best practices Current problems
15.
#blockchainhackers, Prague 29.10.2018 •
Add more rules • Migrate to Vyper grammar • Open source engine? Our plans
16.
Static Analysis for Vyper #blockchainhackers,
Prague 29.10.2018 Evgeny Marchenko SmartDec Lead Developer machenko@smartdec.net
Download now