Static Analysis for Vyper by Evgeny Marchenko, Lead Developer at SmartDec
•
1 like•195 views
SmartDec Lead Developer Evgeny Marchenko is introducing Static Analysis for Vyper
Recommended
Recommended
More Related Content
Similar to Static Analysis for Vyper by Evgeny Marchenko, Lead Developer at SmartDec
Similar to Static Analysis for Vyper by Evgeny Marchenko, Lead Developer at SmartDec (20)
Recently uploaded
Recently uploaded (20)
Static Analysis for Vyper by Evgeny Marchenko, Lead Developer at SmartDec
- 1. Static Analysis for Vyper #blockchainhackers, Prague 29.10.2018 Evgeny Marchenko SmartDec Lead Developer machenko@smartdec.net
- 2. #blockchainhackers, Prague 29.10.2018 • Yet another language • Python-like • Beginners-friendly Vyper Why would one use it?
- 3. #blockchainhackers, Prague 29.10.2018 Improved readability: • No inheritance or function overloading • No modifiers • No assembly Vyper vs Solidity What else?
- 4. #blockchainhackers, Prague 29.10.2018 Improved security: • No recursive calling or infinite-length loops • No integer overflow • Decimal fixed point numbers Vyper vs Solidity Great. And?
- 5. #blockchainhackers, Prague 29.10.2018 Impressions: • Less error-prone • Lacks some • Easier to analyze Vyper vs Solidity Does it help?
- 6. #blockchainhackers, Prague 29.10.2018 • Little documentation • Little to no community • Small toolbox Vyper disadvanages That’s not great =
- 7. #blockchainhackers, Prague 29.10.2018 • Linters / Syntax highlighters • Compiler / IDE • Frameworks Tools for Vyper Nice, but not enough
- 8. #blockchainhackers, Prague 29.10.2018 • Simple to use tool • Looks for bugs, code quality issues and some vulnerabilities • Provides detailed explanations SmartCheck How to use it?
- 9. #blockchainhackers, Prague 29.10.2018 • Supports Solidity and Vyper • Add sources for analysis • Check results on Web interface SmartCheck: UX Let’s try =)
- 12. #blockchainhackers, Prague 29.10.2018 • Parse with ANTLR and query with XPATH • That’s FAST! • Adding new rule takes an hour SmartCheck: engine
- 13. #blockchainhackers, Prague 29.10.2018 • Around 10 rules • Mostly EVM issues • Few Vyper-specific problems Vyper rules
- 14. #blockchainhackers, Prague 29.10.2018 • Awkward Python grammar • Little experience with Vyper • No best practices Current problems
- 15. #blockchainhackers, Prague 29.10.2018 • Add more rules • Migrate to Vyper grammar • Open source engine? Our plans
- 16. Static Analysis for Vyper #blockchainhackers, Prague 29.10.2018 Evgeny Marchenko SmartDec Lead Developer machenko@smartdec.net