Ledger LandISSUE #87 of 90

audits · slither · mythril · manual review

BlockyVSDouble-Spend Dan

Blocky saysAudits combine automated tools (Slither, Mythril) with manual expert review.

Before deploying value-bearing contracts, you audit. Static analyzers (Slither) and symbolic execution (Mythril) catch known bug patterns automatically and cheaply. But the high-value vulnerabilities — logic flaws, economic exploits — need expert manual review and often a public bug bounty. Tools narrow the search; humans find the subtle, costly bugs. No single layer is sufficient.

Power-ups you unlock

Static analysis (Slither), symbolic exec (Mythril)
Tools catch known patterns cheaply
Manual review finds logic/economic flaws
Layer tools + experts + bug bounties

Double-Spend Dan attacks — common mistakes

Relying on automated tools alone
Skipping audits for "small" value contracts
Treating one audit as a permanent guarantee

Boss battleExplain why automated tools alone can’t fully secure a contract.

Example code

<!doctype html><html><head><meta charset="utf-8"></head>
<body style="background:#06040d;color:#e6e0ff;font-family:monospace;padding:20px"><pre>Slither/Mythril → known patterns (cheap, broad)
manual audit    → logic & economic flaws (deep)
bug bounty      → ongoing real-world pressure</pre></body></html>

▶ Open the interactive comic issue

‹ Security · Reentrancy · Overflow · Access Control Front-Running · Sandwiching · Countermeasures ›