{"signature": "0x5bf3ddddce89920a55e92895a8bc3b0f102f17f24477d761f984cea22c8bcbca2ad937750cd0a29487748786f788949d9c3afb0c5832e357c84ecad6243c49201b", "application": {"round": "0xd2d99614321becd7cd0636715bbb4c94968e6271", "answers": [{"type": "email", "hidden": true, "question": "Email Address", "questionId": 0, "encryptedAnswer": {"ciphertext": "tZtAfWSL6cfrqz6TdYyZnjSbkFgF1oIIGxpk/GUFxYM=", "encryptedSymmetricKey": "d1ece6a2f6092c611f51030ff0711f8e0756f2cfeb6d432473ffeac7c9bbcba2ebc15ac48206dba67cf938d44696a5180fd92d3e26457d84c2724e25b6f911cb062834f1413e0fe6f51bc77b4150f8885b2dd81add925d6b5aaadd87fab259b50ae107b68359ecb40684c29c55dff266db895863768c0f70a00de19d386fb07a00000000000000204dc4b3948e0e7ef9ed026ad31e31b8cf4289704785b0095863a8945e5ff319bdc67a4d577f931f257ce252dd724d36a6"}}, {"type": "short-answer", "answer": "@wn561", "hidden": true, "question": "Telegram Handle", "questionId": 1}, {"type": "short-answer", "answer": "https://github.com/Cyfrin/aderyn", "hidden": true, "question": "Project GitHub Repo", "questionId": 2}, {"type": "short-answer", "hidden": true, "question": "Link to your Public Group Chat", "questionId": 3}, {"type": "short-answer", "answer": "No", "hidden": true, "question": "Have you participated in a previous Gitcoin Grants Round? If so, please name the rounds or link the builder profile associated with previous rounds.", "questionId": 4}, {"type": "paragraph", "answer": "##  Cyfrin Aderyn Key Features:\n\nStatic Analysis of Solidity Smart Contracts: Aderyn excels in parsing and analyzing Solidity smart contracts, providing insights into potential security risks and inefficiencies.\n\nAdapt Aderyn to any codebase:  Aderyn allows developers to create custom detectors to analyze and find specific code-based vulnerabilities. \n\nCommand Line Interface: Aderyn offers a developer-friendly CLI to customize its settings and your Solidity smart contracts analysis and reports.\n\nAnalyse only what matters: Aderyn allows specifying particular contracts to be analyzed or excluded, giving users control over the scope of the analysis.\n\nFull control over your reports: The analysis results can be outputted in different formats, including Markdown and JSON, catering to different needs, such as human-readable reports or CI (Continuous Integration) pipeline integration.\n\nLighting fast execution: Written in Rust, Aderyn keeps its analysis times under the second.", "hidden": true, "question": "Provide a brief overview of your tool, library, or framework. What specific problem or inefficiency in the development process does it address?", "questionId": 5}, {"type": "paragraph", "answer": "## Expectations and Web3 Benefits\n\n### Expectations:\n* A public good open-source developer tool that enables developers to write more secure code *as they write it*.\n\n* Be the most user-friendly, seamless Solidity developer tool (VSCode extension) for security.\n\n* Be part of every Solidity developer’s toolbelt.\n   - When you start your journey, the onboarding flow will be: 1. Install Foundry, 2. Install VSCode, 3. Get the Solidity extension, 4. Get the Aderyn extension… Go!\n\n### Benefits\n* Web3 is more secure in the long run because tools like this drive the cost of finding and resolving vulnerabilities towards $0.\n\n* Developers write more secure code by default.\n\n* Less reliance on Auditors finding the low-hanging fruit because the developers can fix more security issues during the development process.", "hidden": true, "question": "How does your project reduce development barriers, improve efficiency, or enhance the security of Web3 projects? Please provide specific examples or metrics if available.", "questionId": 6}, {"type": "paragraph", "answer": "* 382 stars\n* 54 forks\n* 13 contributors\n\nAderyn is also being used in smart contract audits and audit competitions to quickly identify bugs that usually take up unnecessary time. ", "hidden": true, "question": "Describe the current usage and support for your tool within the developer community. This could include GitHub stars, downloads, or testimonials from developers.", "questionId": 7}, {"type": "paragraph", "answer": "Things we want to do, but bandwidth and funding restrict progress:\n\n* Reach 100 detectors (currently 29)\n\n* Reach 200 detectors\n\n* Build out “Auditor Mode”\n    - Auditor Mode is currently experimental\n    - This mode differs from Aderyn’s main use case (aiding developer workflow) in that it aims to aid auditor workflow.\n    - Provides contextual information about a smart contract, like:\n        - Show me all of the instances in which this storage slot is altered\n        - Show me all of the external calls to other contracts and where the address comes from\n    - Intended to automate manual processes that auditors go through\n\n* Auto-fix: Some issues have to be fixed manually by the developer, but some can be auto-fixed by Aderyn\n\n* Updraft course on static analysis, AST, Compilers, Rust, etc\n\n* Packaging and open-sourcing Aderyn’s Solidity AST parsing into a reusable library for the benefit of other developers of rust-based solidity tooling\n\n* Performance improvements (already sub-1-second, but real-time feedback is required to provide the most valuable experience for devs)", "hidden": true, "question": "Outline your project's roadmap and how the grant funds will be used to achieve your development goals.", "questionId": 8}, {"type": "paragraph", "hidden": true, "question": "For any project deploying smart contracts on blockchain networks, please list all your deployer addresses and their corresponding blockchain networks. Use this format for each entry: [deployer_address], [chain_id]—for example, 0x123abc..., 42161 (This represents a deployer address on the Arbitrum network). Please include a separate line for each unique deployer address and blockchain combination.", "questionId": 9}], "project": {"id": "0xb1e2bdde0f89f071280085bf7fdbbba143408a43bd2166a87647f3326e4f57f5", "title": "Aderyn", "logoImg": "bafkreibjyewj32rf3cc4fct6vmkjhnlrdv2mweykxnzwoawem4gcnd226u", "metaPtr": {"pointer": "bafkreigsnhvnmlc5uk3yzoo6ab5ekj3omrlbjutkp3cety4cicillcom74", "protocol": "undefined"}, "website": "https://github.com/Cyfrin/aderyn", "bannerImg": "bafkreih4yvafq76xp2jt2pkprwprr5azkipwl2rvlhzymam63jjsm464de", "createdAt": 1728381055401, "userGithub": "Will-Cyfrin", "credentials": {"github": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..ctapaDoKFExJBTQysp80b3CSU8PyDnyk0VbfquXSsF-SKmR4gwXviT31iCwlle665eFhkX3dYy6N1VzBgxjzAQ", "type": "Ed25519Signature2018", "created": "2024-10-08T09:50:19.540Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2024-10-08T09:50:19.540Z", "expirationDate": "2025-01-06T09:50:19.540Z", "credentialSubject": {"id": "did:pkh:eip155:1:0xd04A28A9f78665d7EA560BCDfC884FA730687C64", "hash": "v0.0.0:57I85/YTgeY8rCwrs/YuaFFwrpPyVrLKNzcwKFPAeq4=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextGithubOrg#Cyfrin#165793632"}}, "twitter": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..VAFdyXnvwcmvhnk5MtFWVxh5vZAXM_JV6XbKsqSsIGDs6nX1_saAsBB62dyCv5tL-_PaU4hDdKYmROWHsjmBDQ", "type": "Ed25519Signature2018", "created": "2024-10-08T09:50:08.879Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2024-10-08T09:50:08.879Z", "expirationDate": "2025-01-06T09:50:08.879Z", "credentialSubject": {"id": "did:pkh:eip155:1:0xd04A28A9f78665d7EA560BCDfC884FA730687C64", "hash": "v0.0.0:9US7lCsY70aFWRFnZ0q2AxSFyRECD/+pN0R8vsYqJJ4=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextTwitter#CyfrinAudits"}}}, "description": "Aderyn is an open-source, public-good developer tool. It is a Rust-based solidity smart contract static analyzer designed to help protocol engineers and security researchers find vulnerabilities in Solidity code bases.\n\nAderyn integrates seamlessly into small and enterprise-level development workflows. It offers lightning-fast, command-line, static analysis functionality and a framework for building custom detectors that adapt to any Solidity codebase.\n\n\n### Aderyn does three things really well:‍‍‍\n\n* Identify Solidity Smart contract vulnerabilities: Cyfrin Aderyn quickly identifies potential vulnerabilities in Solidity code and highlights parts of the codebase for further investigation.\n\n* Supports building custom detectors to suit your needs: Protocols and security researchers can use the Cyfrin Aderyn framework to build custom vulnerability detectors for any Solidity codebase.\n\n* Identify known issues and protect your value: Competitive auditing platforms can use Cyfrin Aderyn to detect and filter out known issues inside protocol codebases, protecting customers' and auditors' time and value.\n\n\n## Who is it for?\n### 1. Developers\n\nAs a new generation of developers enters the space, we (the security community) are responsible for using our knowledge and experience to create tools that facilitate secure development practices. We need to make it easy to avoid repeating past mistakes.\n\nFrom a developer's perspective, the cost of finding bugs in Solidity code is exorbitantly high. Engaging top-tier security firms like Cyfrin Private Audits or competitive audit platforms like CodeHawks requires serious cash. That's because the security knowledge required to stamp out bugs is pooled among security firms and competitive auditors, who are in demand.\n\nWe must drive the cost of finding bugs, especially the common and known ones, towards zero by creating tools that make development secure by nature.\n\nAderyn is built for lightning-fast, open-source static analysis that hooks into the existing development workflow. \n\n\n### 2. Security Researchers\n\nSecurity Researchers are the knowledge guardians of the on-chain world. They are the people you engage with when you're undergoing an audit. Many auditors start every audit with a long checklist. They read through the codebase, ensuring the code doesn't violate any items on their list. If it does, it's an issue for the report. Once they've finished with this list, they get creative and try out other techniques.\n\nAderyn's detector framework enables Security Researchers to encode the patterns they look for in their checklist into Aderyn detectors. By doing this, the research community can focus on the deeper, more complex bugs, knowing that tooling has uncovered the repetitive checklist of issues so they don't have to.\n\nDevelopers write more secure code before they engage Security Researchers, and when they do, the Researchers can spend more time on complex bugs instead of manually checking for easy fixes. \n\n\n## What makes Aderyn unique vs similar tools?\n\n* Speed: Real-time feedback as you’re coding with the upcoming vscode extension.\n\n* Cutting-edge detectors: The detectors are built from the latest findings from external and in-house auditors. This means developers can harness the power of an audit team at their fingertips for free!\n\n* “Auditor Mode”: Helps auditors find specific areas and concepts within a codebase to dig further. For example, “Show me all of the instances in which this storage slot is altered”.\n\n* Open-source: This tool is completely open-source and will be free for all developers in perpetuity. Cyfrin does not make money directly from it.\n\n\n## Who are Cyfrin:\n\nCyfrin is the industry-leading smart contract education and security company. Home to 8,000 security researchers and a community of over 100,000 students and smart contract engineers, we provide audits, tools, and education to the world's biggest decentralized protocols, institutions, and products.\n\nThis project refers specifically to Cyfrin's developer tool, Aderyn. \n", "lastUpdated": 0, "projectGithub": "Cyfrin", "projectTwitter": "cyfrinaudits"}, "recipient": "0x3846c3A30E62075Fa916216b35EF04B8F53931f6"}}