question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Feature request: Please allow to specify initial state when analysing

See original GitHub issue

Currently, anaylysis are performed with [SOMEGUY] and [ATTACKER] having initally a balance of 0 and no storage in the target smart contract (which can also means a token balances of 0).

But almost all smart contract real bug founds initally required buying a tiny amount of the token on an exchange or attacker sending an amount of ether in order to withdraw way more than he should.

Issue Analytics

  • State:open
  • Created 4 years ago
  • Comments:26

github_iconTop GitHub Comments

2reactions
ytrezqcommented, Oct 18, 2019

@norhh : oh ! Simple : Etherrol ! For such on‑chain contract, mythril base it’s permissions on creator actions whereas the adress which has real owner priviliges isn’t controlled by creator but by a off‑chain robot and thus mythril doesn’t use the address controlled by the bot in analysis (where the address of the robot was specified in constructor and isn’t modifiable).

0reactions
norhhcommented, Nov 6, 2019

I mean mythril uses onchain storage if you are accessing onchain contract, something like myth analyze --rpc infura-mainnet -a <address> only works only if the address is specified in the source code Or if you specify that address as a command line argument. Anyway, after multi level transactions I suppose it makes it’s simulation based it’s own previous simulated storage changes, correct I am not sure what it means, mythril creates a contract from the source code and then executes multiple sequence of transactions locally which mutates the local storage.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Feature flags in the development of GitLab
Merge requests that introduce a feature flag, update its state, or remove them existing feature flag because a feature is deemed stable must...
Read more >
How to Submit a Feature Request - BetterCloud | Help Center
You can always use it for tracking purposes. Idea name and description - the name and description of the idea, as defined by...
Read more >
Feature request response email templates - LiveAgent
Saying 'yes' to feature requests ... Hi [Name],. Thank you for taking the time to contact us. There's no way to do that...
Read more >
Actions | Input System | 1.0.2 - Unity - Manual
For an Action to do something, you must first enable it. You can do this either by individually enabling Actions, or by enabling...
Read more >
Configure advanced features in Microsoft Defender for Endpoint
Turn on advanced features such as block file in Microsoft ... by default to resolve alerts where the automated analysis result status is...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found