About this Column Analyzing recent or significant security incidents is crucial for understanding the root causes and developing effective strategies to prevent future breaches. In this column, I will delve into the underlying factors and attack steps that contribute to these incidents.

About Myself

Hello everyone, I'm Lori. I specialize in blockchain security. Here are some of the works I completed during my master's program:

Blockchain Security Research

• Consensus Mechanisms and Chain Selection Algorithms: Conducted in-depth research on the consensus mechanisms and chain selection algorithms of blockchains like Ethereum and Solana. I paid special attention to GHOST protocols, analyzing potential vulnerabilities within them.
• Smart Contract Security Research and Attack Replication: Studied smart contract security extensively, familiarizing myself with common attack vectors.

Slither是一种基于静态分析的漏洞扫描框架，用于检测Solidity智能合约中的安全漏洞。 Slither框架具有以下特点和功能：

1. 静态分析：Slither通过对Solidity源代码进行静态分析，而不需要实际执行合约，可以在合约部署之前发现潜在的漏洞和安全问题。 2.多种漏洞检测：Slither内置了多种漏洞检测插件，包括但不限于：可重入漏洞、整数溢出/下溢漏洞、未初始化变量漏洞、权限问题等。 3.高度可配置：Slither提供了丰富的配置选项，可以根据具体需求选择性地启用或禁用特定的漏洞检测插件，以及设置警告级别和输出格式。 4.可扩展性：Slither的设计允许开发人员编写自定义的漏洞检测插件，以满足特定合约的需求或发现新的漏洞类型。 5.详细报告：Slither生成详细的报告，包括每个漏洞的位置、类型、修复建议等信息，帮助开发人员快速定位和解决问题。