Aderyn
Aderyn is a free, open-source Rust static analyzer from Cyfrin that scans Solidity smart contracts for vulnerabilities and works inside your editor.
0 upvotes · 0 downvotes
No ratings yet
- Category
- Web3 & Blockchain Security
- Pricing
- Free
- Platforms
- LinuxmacOS
- License
- Open source
What it is
Aderyn is a Solidity static analyzer written in Rust and maintained by Cyfrin, the smart contract security firm. Cyfrin describes it as an open-source public good developer tool. It is licensed under GPL-3.0.
What it helps with
- Finding vulnerabilities in Solidity code bases with a list of built-in detectors
- Running on Foundry and Hardhat projects without extra configuration
- Producing reports in Markdown, JSON, and SARIF formats
- Flagging issues in the editor through the official VS Code extension
Who it's for
Protocol engineers and smart contract security researchers who want quick static checks on Solidity code.
Worth knowing
Install options include Cyfrinup, a curl installer, Homebrew, and npm. Windows users need WSL. Static analysis surfaces likely issues for review and does not replace a manual audit or fuzzing.
Is Aderyn free?
Yes, Aderyn is free and open source under GPL-3.0.
Does it need configuration?
No, it runs on Foundry and Hardhat projects without any configuration.
How does it compare with Slither?
In our view Aderyn and Slither overlap as Solidity static analyzers and are worth running side by side, while Echidna and Foundry cover fuzzing and testing.
Discussion & reviews
0 comments
No contributions yet. Be the first to review or comment.