Skip to content

Instantly share code, notes, and snippets.

@pertsev
Last active February 3, 2020 13:53
Show Gist options
  • Save pertsev/ca2391c5305cff24fe040d81721d15bc to your computer and use it in GitHub Desktop.
Save pertsev/ca2391c5305cff24fe040d81721d15bc to your computer and use it in GitHub Desktop.
docker run mythril/myth -v4 analyze -l -a 0xFD6C31bb6F05Fc8dB64F4b740Ab758605c271FD8
mythril.mythril.mythril_config [INFO]: Creating mythril data directory
mythril.mythril.mythril_config [INFO]: No config file found. Creating default: /root/.mythril/config.ini
mythril.mythril.mythril_config [INFO]: Using RPC settings: ('mainnet.infura.io', 443, True)
mythril.support.signatures [INFO]: Using signature database at /root/.mythril/signatures.db
mythril.analysis.security [INFO]: Found 0 detection modules
mythril.laser.ethereum.svm [INFO]: LASER EVM initialized with dynamic loader: <mythril.support.loader.DynLoader object at 0x7feead59bcf8>
mythril.laser.ethereum.strategy.extensions.bounded_loops [INFO]: Loaded search strategy extension: Loop bounds (limit = 3)
mythril.laser.ethereum.plugins.plugin_loader [INFO]: Loading plugin: <mythril.laser.ethereum.plugins.implementations.mutation_pruner.MutationPruner object at 0x7feead5bf908>
mythril.laser.ethereum.plugins.plugin_loader [INFO]: Loading plugin: <mythril.laser.ethereum.plugins.implementations.coverage.coverage_plugin.InstructionCoveragePlugin object at 0x7feead59be10>
mythril.laser.ethereum.plugins.plugin_loader [INFO]: Loading plugin: <mythril.laser.ethereum.plugins.implementations.dependency_pruner.DependencyPruner object at 0x7feead5bf320>
mythril.analysis.security [INFO]: Found 14 detection modules
mythril.analysis.security [INFO]: Found 14 detection modules
mythril.laser.ethereum.svm [INFO]: Starting message call transaction to 1446787477782261368809081114886461055491285393368
mythril.laser.ethereum.svm [INFO]: Starting message call transaction, iteration: 0, 1 initial states
mythril.laser.ethereum.plugins.implementations.coverage.coverage_plugin [INFO]: Number of new instructions covered in tx 0: 1895
mythril.laser.ethereum.svm [INFO]: Starting message call transaction, iteration: 1, 6 initial states
mythril.laser.ethereum.plugins.implementations.coverage.coverage_plugin [INFO]: Number of new instructions covered in tx 1: 348
mythril.laser.ethereum.svm [INFO]: Finished symbolic execution
mythril.laser.ethereum.plugins.implementations.coverage.coverage_plugin [INFO]: Achieved 98.42% coverage for code: 0x6080604052600436106101115763ffffffff7c010000000000000000000000000000000000000000000000000000000060003504166305d2035b811461011657806306fdde031461013f578063095ea7b3146101c957806318160ddd146101ed57806323b872dd14610214578063313ce5671461023e5780633f4ba83a1461025357806340c10f191461026a5780635c975abb1461028e57806366188463146102a357806370a08231146102c7578063715018a6146102e85780637d64bcb4146102fd5780638456cb59146103125780638da5cb5b1461032757806395d89b4114610358578063a9059cbb1461036d578063d73dd62314610391578063dd62ed3e146103b5578063f2fde38b146103dc575b600080fd5b34801561012257600080fd5b5061012b6103fd565b604080519115158252519081900360200190f35b34801561014b57600080fd5b5061015461041e565b6040805160208082528351818301528351919283929083019185019080838360005b8381101561018e578181015183820152602001610176565b50505050905090810190601f1680156101bb5780820380516001836020036101000a031916815260200191505b509250505060405180910390f35b3480156101d557600080fd5b5061012b600160a060020a03600435166024356104ac565b3480156101f957600080fd5b506102026104d7565b60408051918252519081900360200190f35b34801561022057600080fd5b5061012b600160a060020a03600435811690602435166044356104dd565b34801561024a57600080fd5b5061020261050a565b34801561025f57600080fd5b50610268610510565b005b34801561027657600080fd5b5061012b600160a060020a0360043516602435610589565b34801561029a57600080fd5b5061012b6106a4565b3480156102af57600080fd5b5061012b600160a060020a03600435166024356106b4565b3480156102d357600080fd5b50610202600160a060020a03600435166106d8565b3480156102f457600080fd5b506102686106f3565b34801561030957600080fd5b5061012b610761565b34801561031e57600080fd5b50610268610807565b34801561033357600080fd5b5061033c610885565b60408051600160a060020a039092168252519081900360200190f35b34801561036457600080fd5b50610154610894565b34801561037957600080fd5b5061012b600160a060020a03600435166024356108ef565b34801561039d57600080fd5b5061012b600160a060020a0360043516602435610913565b3480156103c157600080fd5b50610202600160a060020a0360043581169060243516610937565b3480156103e857600080fd5b50610268600160a060020a0360043516610962565b60035474010000000000000000000000000000000000000000900460ff1681565b6004805460408051602060026001851615610100026000190190941693909304601f810184900484028201840190925281815292918301828280156104a45780601f10610479576101008083540402835291602001916104a4565b820191906000526020600020905b81548152906001019060200180831161048757829003601f168201915b505050505081565b60035460009060a860020a900460ff16156104c657600080fd5b6104d08383610985565b9392505050565b60015490565b60035460009060a860020a900460ff16156104f757600080fd5b6105028484846109eb565b949350505050565b60065481565b600354600160a060020a0316331461052757600080fd5b60035460a860020a900460ff16151561053f57600080fd5b6003805475ff000000000000000000000000000000000000000000191690556040517f7805862f689e2f13df9f062ff482ad3ad112aca9e0847911ed832e158c525b3390600090a1565b600354600090600160a060020a031633146105a357600080fd5b60035474010000000000000000000000000000000000000000900460ff16156105cb57600080fd5b6001546105de908363ffffffff610b6216565b600155600160a060020a03831660009081526020819052604090205461060a908363ffffffff610b6216565b600160a060020a03841660008181526020818152604091829020939093558051858152905191927f0f6798a560793a54c3bcfe86a93cde1e73087d944c0ea20544137d412139688592918290030190a2604080518381529051600160a060020a038516916000917fddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef9181900360200190a350600192915050565b60035460a860020a900460ff1681565b60035460009060a860020a900460ff16156106ce57600080fd5b6104d08383610b75565b600160a060020a031660009081526020819052604090205490565b600354600160a060020a0316331461070a57600080fd5b600354604051600160a060020a03909116907ff8df31144d9c2f0f6b59d69b8b98abd5459d07f2742c4df920b25aae33c6482090600090a26003805473ffffffffffffffffffffffffffffffffffffffff19169055565b600354600090600160a060020a0316331461077b57600080fd5b60035474010000000000000000000000000000000000000000900460ff16156107a357600080fd5b6003805474ff00000000000000000000000000000000000000001916740100000000000000000000000000000000000000001790556040517fae5184fba832cb2b1f702aca6117b8d265eaf03ad33eb133f19dde0f5920fa0890600090a150600190565b600354600160a060020a0316331461081e57600080fd5b60035460a860020a900460ff161561083557600080fd5b6003805475ff000000000000000000000000000000000000000000191660a860020a1790556040517f6985a02210a168e66602d3235cb6db0e70f92b3ba4d376a33c0f3d9434bff62590600090a1565b600354600160a060020a031681565b6005805460408051602060026001851615610100026000190190941693909304601f810184900484028201840190925281815292918301828280156104a45780601f10610479576101008083540402835291602001916104a4565b60035460009060a860020a900460ff161561090957600080fd5b6104d08383610c65565b60035460009060a860020a900460ff161561092d57600080fd5b6104d08383610d46565b600160a060020a03918216600090815260026020908152604080832093909416825291909152205490565b600354600160a060020a0316331461097957600080fd5b61098281610ddf565b50565b336000818152600260209081526040808320600160a060020a038716808552908352818420869055815186815291519394909390927f8c5be1e5ebec7d5bd14f71427d1e84f3dd0314c0f7b2291e5b200ac8c7c3b925928290030190a350600192915050565b6000600160a060020a0383161515610a0257600080fd5b600160a060020a038416600090815260208190526040902054821115610a2757600080fd5b600160a060020a0384166000908152600260209081526040808320338452909152902054821115610a5757600080fd5b600160a060020a038416600090815260208190526040902054610a80908363ffffffff610e5d16565b600160a060020a038086166000908152602081905260408082209390935590851681522054610ab5908363ffffffff610b6216565b600160a060020a03808516600090815260208181526040808320949094559187168152600282528281203382529091522054610af7908363ffffffff610e5d16565b600160a060020a03808616600081815260026020908152604080832033845282529182902094909455805186815290519287169391927fddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef929181900390910190a35060019392505050565b81810182811015610b6f57fe5b92915050565b336000908152600260209081526040808320600160a060020a038616845290915281205480831115610bca57336000908152600260209081526040808320600160a060020a0388168452909152812055610bff565b610bda818463ffffffff610e5d16565b336000908152600260209081526040808320600160a060020a03891684529091529020555b336000818152600260209081526040808320600160a060020a0389168085529083529281902054815190815290519293927f8c5be1e5ebec7d5bd14f71427d1e84f3dd0314c0f7b2291e5b200ac8c7c3b925929181900390910190a35060019392505050565b6000600160a060020a0383161515610c7c57600080fd5b33600090815260208190526040902054821115610c9857600080fd5b33600090815260208190526040902054610cb8908363ffffffff610e5d16565b3360009081526020819052604080822092909255600160a060020a03851681522054610cea908363ffffffff610b6216565b600160a060020a038416600081815260208181526040918290209390935580518581529051919233927fddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef9281900390910190a350600192915050565b336000908152600260209081526040808320600160a060020a0386168452909152812054610d7a908363ffffffff610b6216565b336000818152600260209081526040808320600160a060020a0389168085529083529281902085905580519485525191937f8c5be1e5ebec7d5bd14f71427d1e84f3dd0314c0f7b2291e5b200ac8c7c3b925929081900390910190a350600192915050565b600160a060020a0381161515610df457600080fd5b600354604051600160a060020a038084169216907f8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e090600090a36003805473ffffffffffffffffffffffffffffffffffffffff1916600160a060020a0392909216919091179055565b600082821115610e6957fe5b509003905600a165627a7a723058204bde80b9886fe2bd7ec40a2d2918600dfbc01292b9fd79d10a977045494a83f70029
mythril.analysis.security [INFO]: Starting analysis
mythril.analysis.security [INFO]: Found 0 detection modules
mythril.analysis.security [INFO]: Found 14 detection modules
mythril.analysis.security [INFO]: Found 14 detection modules
mythril.mythril.mythril_analyzer [INFO]: Solver statistics:
Query count: 1851
Solver time: 194.845454454422
==== Integer Overflow ====
SWC ID: 101
Severity: High
Contract: 0xFD6C31bb6F05Fc8dB64F4b740Ab758605c271FD8
Function name: name()
PC address: 1079
Estimated Gas Usage: 1552 - 3293
The binary addition can overflow.
The operands of the addition operation are not sufficiently constrained. The addition could therefore result in an integer overflow. Prevent the overflow by checking inputs or ensure sure that the overflow is caught by an assertion.
--------------------
Initial State:
Account: [ATTACKER], balance: 0x0, nonce:0, storage:{}
Account: [SOMEGUY], balance: 0x0, nonce:0, storage:{}
Transaction Sequence:
Caller: [CREATOR], function: name(), txdata: 0x06fdde03, value: 0x0
==== Integer Overflow ====
SWC ID: 101
Severity: High
Contract: 0xFD6C31bb6F05Fc8dB64F4b740Ab758605c271FD8
Function name: link_classic_internal(uint64,int64)
PC address: 2221
Estimated Gas Usage: 1860 - 3601
The binary addition can overflow.
The operands of the addition operation are not sufficiently constrained. The addition could therefore result in an integer overflow. Prevent the overflow by checking inputs or ensure sure that the overflow is caught by an assertion.
--------------------
Initial State:
Account: [ATTACKER], balance: 0x0, nonce:0, storage:{}
Account: [SOMEGUY], balance: 0x0, nonce:0, storage:{}
Transaction Sequence:
Caller: [CREATOR], function: link_classic_internal(uint64,int64), txdata: 0x95d89b41, value: 0x0
==== Exception State ====
SWC ID: 110
Severity: Low
Contract: 0xFD6C31bb6F05Fc8dB64F4b740Ab758605c271FD8
Function name: increaseApproval(address,uint256)
PC address: 2926
Estimated Gas Usage: 1638 - 3103
A reachable exception has been detected.
It is possible to trigger an exception (opcode 0xfe). Exceptions can be caused by type errors, division by zero, out-of-bounds array access, or assert violations. Note that explicit `assert()` should only be used to check invariants. Use `require()` for regular input checking.
--------------------
Initial State:
Account: [ATTACKER], balance: 0x22040000000014111, nonce:0, storage:{}
Account: [SOMEGUY], balance: 0x4183142903051602, nonce:0, storage:{}
Transaction Sequence:
Caller: [ATTACKER], function: approve(address,uint256), txdata: 0x095ea7b380808080808080808080808001404080028000008004404000000040041000025a, value: 0x0
Caller: [ATTACKER], function: increaseApproval(address,uint256), txdata: 0xd73dd6238080808080808080808080800140408002800000800440400000004004100002cb, value: 0x0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment