-
Notifications
You must be signed in to change notification settings - Fork 2
Open
Description
Traverse currently lacks support for analyzing inline assembly (Yul) code within Solidity contracts. This prevents detection of vulnerabilities, gas inefficiencies, and contract interactions that occur through assembly blocks, including raw calls to other contracts using .call(), delegatecall(), or direct assembly operations.
Traverse should parse and analyze Yul assembly blocks to detect unsafe patterns, resolve raw contract calls within the same repository, track state changes through assembly operations, and identify potential security issues in low-level code. This would provide comprehensive coverage for contracts using assembly for gas optimization or advanced functionality.
Metadata
Metadata
Assignees
Labels
No labels