List view
- No due date•8/8 issues closed
- Command line interface (CLI) for the tool. - Ability to generate output formatted as text, JSON, HTML and SARIF. - A VSCode extension that integrates the tool with the ability to list security issues, highlight issues with squiggles and hover-over descriptions. - New detectors: including more vulnerability classes than those included in Milestone 1. - Integration tests for all detectors. Improving detectors, if needed, to precisely detect vulnerabilities listed in Milestone 1. - Public project repo and website. - Tool Documentation. - Article on detection of vulnerabilities in Soroban smart contracts, to be published in CoinFabrik blog.
Overdue by 1 year(s)•Due by December 29, 2023•15/15 issues closed- A curated list of vulnerabilities, best practices, and enhancements related to Soroban smart contracts. This will include a generic description of the issue, and a pair of smart contracts, one including the security issue and a second one "fixing" the issue. - Proof of concept code for a tool that detects security issues from the above list. - Associated report and repository for scout-soroban.
Overdue by 2 year(s)•Due by December 1, 2023•25/25 issues closed