{"title": "Cyfrin Aderyn", "logoImg": "bafkreic4cza7ygygrx3pz4zdvxzb4x7yqpnepqqm3thz72et2eshldvhue", "website": "https://github.com/Cyfrin/aderyn", "bannerImg": "bafkreigcdw4iiiopfonptinewypkspyin5fkrqqt4bpfbqnckja3rzthzu", "createdAt": 1723041440578, "userGithub": "", "credentials": {}, "description": "Built using Rust, Aderyn integrates seamlessly into small and enterprise-level development workflows. It offers lightning-fast command-line static analysis functionality and a framework for building custom detectors that adapt to any Solidity codebase.\n\n### Aderyn does three things really well:‍‍‍\n\n* Identify Solidity Smart contract vulnerabilities: Cyfrin Aderyn quickly identifies potential vulnerabilities in Solidity code and highlights parts of the codebase for further investigation.\n\n* Supports building custom detectors to suit your needs: Protocols and security researchers can use the Cyfrin Aderyn framework to build custom vulnerability detectors for any Solidity codebase.\n\n* Identify known issues and protect your value: Competitive auditing platforms can use Cyfrin Aderyn to detect and filter out known issues inside protocol codebases, protecting customers' and auditors' time and value.\n\n\n### Who is it for?\n1. Developers\n\nAs a new generation of developers enters the space, we (the security community) are responsible for using our knowledge and experience to create tools that facilitate secure development practices. We need to make it easy to avoid repeating past mistakes.\n\nThe cost of finding bugs in Solidity code is exorbitantly high from a dev's perspective. Engaging top-tier security firms like Cyfrin Audits or competitive audits like CodeHawks requires serious cash. That's because the security knowledge required to stamp out bugs is pooled among security firms and competitive auditors, who are in demand.\n\nWe must drive the cost of finding bugs, especially the common and known ones, towards zero by creating tools that make development secure by nature.\n\nAderyn is built for lightning-fast, open-source static analysis that hooks into the existing development workflow. \n\n\n2. Security Researchers\n\nSecurity Researchers are the knowledge guardians of the on-chain world. They are the people you engage with when you're undergoing an audit. Many auditors start every audit with a long checklist. They read through the codebase, ensuring the code doesn't violate any items on their list. If it does, it's an issue for the report. Once they've finished with this list, they get creative and try out other techniques.\n\nAderyn's detector framework enables Security Researchers to encode the patterns they look for in their checklist into Aderyn detectors. By doing this, the research community can focus on the deeper, more complex bugs, knowing that tooling has uncovered the repetitive checklist of issues so they don't have to.\n\nDevelopers write more secure code before they engage Security Researchers, and when they do, the Researchers can spend more time on complex bugs instead of manually checking for easy fixes. \n\n\n### What makes Aderyn unique vs similar tools?\n\n* Speed - real-time feedback as you’re coding with the upcoming vscode extension\n\n* Cutting-edge detectors - the detectors are built from the latest findings from external and in-house auditors. This means developers can harness the power of an audit team at their fingertips for free!\n\n* “Auditor Mode” - helps auditors find specific areas and concepts within a codebase to dig further. For example, “Show me all of the instances in which this storage slot is altered”.\n\n* Open-source - this tool is completely open-source and will be free for all developers in perpetuity. Cyfrin does not make money directly from it.\n\n\n### Who are Cyfrin:\n\nCyfrin is the industry-leading smart contract education and security company. Home to 8,000 security researchers and a community of over 100,000 students and smart contract engineers, we provide audits, tools, and education to the world's biggest decentralized protocols, institutions, and products.\n\nThis project refers specifically to Cyfrin's developer tool, Aderyn. ", "logoImgData": {}, "bannerImgData": {}, "projectGithub": " Cyfrin", "projectTwitter": "cyfrinaudits"}