[Ethereum] Slither Tool Error On Contract That Inherit From Openzeppeling

openzeppelinopenzeppelin-contractsreentrant-attacksSecuritysolidity

Hey Guys Hi ALl !
*I'm trying to use SLITHER (analizy tool ) but when i try to use it on a contract what inherit from Openzeppelin it give me this error(photo)
Error: Source "@openzeppelin/contracts/token/ERC20/extensions/ERC20Pausable.sol" not found: File not found."

Error: Source "@openzeppelin/contracts/access/Ownable.sol" not found: File not found.

This is My Contract :

contract WeakToken is ERC20Pausable, Ownable{
etc…….
}

Some of you used SLITHER Tool ?
And you try with contract what inherit from Openzeppeling ?*

Best Answer

Slither use crytic-compile for compiling your contracts. If you specify the path to your contract crytic-compile will try to compile it using your installed solc version. solc can't resolve your "@openzeppelin" imports. I am going to guess you are using some tooling like Hardhat or Truffle, if you are I would recommend using slither . instead of specifying the path to the contract; in this way, crytic can realize you are using a framework like Hardhat and compile with it.

Another solution could be using the --solc-remaps from crytici-compile, your command would be something like:

slither <path_to_your_contract> --solc-remaps @openzeppelin=node_modules/@openzeppelin

Answering your last questions: Yes, I have used slither with contracts that inherit from openzeppelin contracts. IMO The easiest way would be using Hardhat or Truffle.

Related Solutions

[Ethereum] Truffle compile gives Parser Error: Error parsing openzeppelin-solidity/contracts/ownership/Ownable.sol

Current version of open-zeppelin (2.0.0) relies on solc version 0.4.24.

Current version of truffle (5.0.0) relies on solc version 0.5.0.

Between solc 0.4.x and solc 0.5.x there are breaking changes.

Previous version of truffle (4.1.14) relies on solc version 0.4.24.

So in order to use open-zeppelin in conjunction with truffle, set in your package.json file:

"devDependencies": {
  "truffle": "4.1.14",
  "openzeppelin-solidity": "2.0.0",
  ...
}

Alternatively, in truffle 5.0.0 onward, you can choose the desired version of solc.

For example, in order to configure truffle to use solc 0.4.24, add this in truffle-config.js:

compilers: {
    solc: {
        version: "0.4.24"
    }
}

See more details in Truffle 5.0.0 release notes for how to bring your own compiler.

[Ethereum] Importing in SOLC to deploy smart contract

solc can't get things over a network - it can only import local files, which was your initial error.

I'm assuming your npm install step is still leading to failure because the compiler is still looking in the wrong place. (I'd assume the OpenZeppelin stuff has gone into the node_modules folder.)

Take a look at how to manually map in localised - i.e. downloaded/cloned - files by passing the relevant options to solc.

An example from the documentation:

> solc github.com/ethereum/dapp-bin/=/usr/local/dapp-bin/ source.sol

(Remix, being an IDE, has the in-built intelligence to know how to pull files from GitHub prior to the compilation step.)

Best Answer

Related Solutions

[Ethereum] Truffle compile gives Parser Error: Error parsing openzeppelin-solidity/contracts/ownership/Ownable.sol

[Ethereum] Importing in SOLC to deploy smart contract

Related Topic