An analysis tool for smart contracts
Project description
Oyente
======
An Analysis Tool for Smart Contracts
[![Gitter][gitter-badge]][gitter-url]
[![License: GPL v3][license-badge]][license-badge-url]
## Quick Start
A container with the dependencies set up can be found [here](https://hub.docker.com/r/luongnguyen/oyente/).
To open the container, install docker and run:
```
docker pull luongnguyen/oyente && docker run -i -t luongnguyen/oyente
```
To evaluate the greeter contract inside the container, run:
```
cd /oyente && python oyente.py -s greeter.sol
```
and you are done!
Note - If need the [version of Oyente](https://github.com/melonproject/oyente/tree/290f1ae1bbb295b8e61cbf0eed93dbde6f287e69) referred to in the paper, run the container from [here](https://hub.docker.com/r/hrishioa/oyente/)
## Installation
To install Oyente, simply:
```
$ pip install oyente
```
## Full install
### Install the following dependencies
#### solc version 0.4.13
```
$ sudo add-apt-repository ppa:ethereum/ethereum
$ sudo apt-get update
$ sudo apt-get install solc
```
#### evm from [go-ethereum](https://github.com/ethereum/go-ethereum) version 1.6.1.
1. https://geth.ethereum.org/downloads/ or
2. By from PPA if your using Ubuntu
```
$ sudo apt-get install software-properties-common
$ sudo add-apt-repository -y ppa:ethereum/ethereum
$ sudo apt-get update
$ sudo apt-get install ethereum
```
#### [z3](https://github.com/Z3Prover/z3/releases) Theorem Prover version 4.5.0.
Download the [source code of version z3-4.5.0](https://github.com/Z3Prover/z3/releases/tag/z3-4.5.0)
Install z3 using Python bindings
```
$ python scripts/mk_make.py --python
$ cd build
$ make
$ sudo make install
```
#### [Requests](https://github.com/kennethreitz/requests/) library
```
pip install requests
```
#### [web3](https://github.com/pipermerriam/web3.py) library
```
pip install web3
```
### Evaluating Ethereum Contracts
```
#evaluate a local solidity contract
python oyente.py -s <contract filename>
#evaluate a local solidity with option -a to verify assertions in the contract
pyhon oyente.py -a -s <contract filename>
#evaluate a local evm contract
python oyente.py -s <contract filename> -b
#evaluate a remote contract
python oyente.py -ru https://gist.githubusercontent.com/loiluu/d0eb34d473e421df12b38c12a7423a61/raw/2415b3fb782f5d286777e0bcebc57812ce3786da/puzzle.sol
```
And that's it! Run ```python oyente.py --help``` for a list of options.
## Paper
The accompanying paper explaining the bugs detected by the tool can be found [here](http://www.comp.nus.edu.sg/~loiluu/papers/oyente.pdf).
## Miscellaneous Utilities
A collection of the utilities that were developed for the paper are in `misc_utils`. Use them at your own risk - they have mostly been disposable.
1. `generate-graphs.py` - Contains a number of functions to get statistics from contracts.
2. `get_source.py` - The *get_contract_code* function can be used to retrieve contract source from [EtherScan](https://etherscan.io)
3. `transaction_scrape.py` - Contains functions to retrieve up-to-date transaction information for a particular contract.
## Benchmarks
Note: This is an improved version of the tool used for the paper. Benchmarks are not for direct comparison.
To run the benchmarks, it is best to use the docker container as it includes the blockchain snapshot necessary.
In the container, run `batch_run.py` after activating the virtualenv. Results are in `results.json` once the benchmark completes.
The benchmarks take a long time and a *lot* of RAM in any but the largest of clusters, beware.
Some analytics regarding the number of contracts tested, number of contracts analysed etc. is collected when running this benchmark.
## Contributing
Checkout out our [contribution guide](https://github.com/melonproject/oyente/blob/master/CONTRIBUTING.md) and the code structure [here](https://github.com/melonproject/oyente/blob/master/code.md).
[gitter-badge]: https://img.shields.io/gitter/room/melonproject/oyente.js.svg?style=flat-square
[gitter-url]: https://gitter.im/melonproject/oyente?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge
[license-badge]: https://img.shields.io/badge/License-GPL%20v3-blue.svg?style=flat-square
[license-badge-url]: ./LICENSE
======
An Analysis Tool for Smart Contracts
[![Gitter][gitter-badge]][gitter-url]
[![License: GPL v3][license-badge]][license-badge-url]
## Quick Start
A container with the dependencies set up can be found [here](https://hub.docker.com/r/luongnguyen/oyente/).
To open the container, install docker and run:
```
docker pull luongnguyen/oyente && docker run -i -t luongnguyen/oyente
```
To evaluate the greeter contract inside the container, run:
```
cd /oyente && python oyente.py -s greeter.sol
```
and you are done!
Note - If need the [version of Oyente](https://github.com/melonproject/oyente/tree/290f1ae1bbb295b8e61cbf0eed93dbde6f287e69) referred to in the paper, run the container from [here](https://hub.docker.com/r/hrishioa/oyente/)
## Installation
To install Oyente, simply:
```
$ pip install oyente
```
## Full install
### Install the following dependencies
#### solc version 0.4.13
```
$ sudo add-apt-repository ppa:ethereum/ethereum
$ sudo apt-get update
$ sudo apt-get install solc
```
#### evm from [go-ethereum](https://github.com/ethereum/go-ethereum) version 1.6.1.
1. https://geth.ethereum.org/downloads/ or
2. By from PPA if your using Ubuntu
```
$ sudo apt-get install software-properties-common
$ sudo add-apt-repository -y ppa:ethereum/ethereum
$ sudo apt-get update
$ sudo apt-get install ethereum
```
#### [z3](https://github.com/Z3Prover/z3/releases) Theorem Prover version 4.5.0.
Download the [source code of version z3-4.5.0](https://github.com/Z3Prover/z3/releases/tag/z3-4.5.0)
Install z3 using Python bindings
```
$ python scripts/mk_make.py --python
$ cd build
$ make
$ sudo make install
```
#### [Requests](https://github.com/kennethreitz/requests/) library
```
pip install requests
```
#### [web3](https://github.com/pipermerriam/web3.py) library
```
pip install web3
```
### Evaluating Ethereum Contracts
```
#evaluate a local solidity contract
python oyente.py -s <contract filename>
#evaluate a local solidity with option -a to verify assertions in the contract
pyhon oyente.py -a -s <contract filename>
#evaluate a local evm contract
python oyente.py -s <contract filename> -b
#evaluate a remote contract
python oyente.py -ru https://gist.githubusercontent.com/loiluu/d0eb34d473e421df12b38c12a7423a61/raw/2415b3fb782f5d286777e0bcebc57812ce3786da/puzzle.sol
```
And that's it! Run ```python oyente.py --help``` for a list of options.
## Paper
The accompanying paper explaining the bugs detected by the tool can be found [here](http://www.comp.nus.edu.sg/~loiluu/papers/oyente.pdf).
## Miscellaneous Utilities
A collection of the utilities that were developed for the paper are in `misc_utils`. Use them at your own risk - they have mostly been disposable.
1. `generate-graphs.py` - Contains a number of functions to get statistics from contracts.
2. `get_source.py` - The *get_contract_code* function can be used to retrieve contract source from [EtherScan](https://etherscan.io)
3. `transaction_scrape.py` - Contains functions to retrieve up-to-date transaction information for a particular contract.
## Benchmarks
Note: This is an improved version of the tool used for the paper. Benchmarks are not for direct comparison.
To run the benchmarks, it is best to use the docker container as it includes the blockchain snapshot necessary.
In the container, run `batch_run.py` after activating the virtualenv. Results are in `results.json` once the benchmark completes.
The benchmarks take a long time and a *lot* of RAM in any but the largest of clusters, beware.
Some analytics regarding the number of contracts tested, number of contracts analysed etc. is collected when running this benchmark.
## Contributing
Checkout out our [contribution guide](https://github.com/melonproject/oyente/blob/master/CONTRIBUTING.md) and the code structure [here](https://github.com/melonproject/oyente/blob/master/code.md).
[gitter-badge]: https://img.shields.io/gitter/room/melonproject/oyente.js.svg?style=flat-square
[gitter-url]: https://gitter.im/melonproject/oyente?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge
[license-badge]: https://img.shields.io/badge/License-GPL%20v3-blue.svg?style=flat-square
[license-badge-url]: ./LICENSE
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
oyente-0.2.6.tar.gz
(32.3 kB
view details)
Built Distribution
oyente-0.2.6-py2-none-any.whl
(40.2 kB
view details)
File details
Details for the file oyente-0.2.6.tar.gz
.
File metadata
- Download URL: oyente-0.2.6.tar.gz
- Upload date:
- Size: 32.3 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
File hashes
Algorithm | Hash digest | |
---|---|---|
SHA256 | fda69072a26e55b5fbfe31645261726e9e85631193fb22eae8784cbf5873d534 |
|
MD5 | 6c0b7d9f6b26bc82d6e38cd7a9c9df1e |
|
BLAKE2b-256 | 209597a47862fb1b7c6808b218fdd412a22fb035f2d755487a1cf9468ad333aa |
File details
Details for the file oyente-0.2.6-py2-none-any.whl
.
File metadata
- Download URL: oyente-0.2.6-py2-none-any.whl
- Upload date:
- Size: 40.2 kB
- Tags: Python 2
- Uploaded using Trusted Publishing? No
File hashes
Algorithm | Hash digest | |
---|---|---|
SHA256 | a4963a7791c5aa986d8b262c87b950d9bdf66a2b31b3fad654df2cd752a762aa |
|
MD5 | d1c770d5df5b69b4d553751dc4cc10b9 |
|
BLAKE2b-256 | 4baea89b9cedd981d1463c9858597ab7eab719a168f62548d60617efccf2da69 |