smartbugs/cpg-contract-checker repository overview

CPG Contract Checker (CCC) analyses potentially incomplete Solidity source code to detect vulnerabilities according to the DASP Top 10. Developed by Fraunhofer AISEC.

This Docker image is part of SmartBugs⁠, a framework for analysing Ethereum smart contracts. SmartBugs implements a modular approach to integrating analysers. All it takes to add a new tool is a Docker image encapsulating the tool, a few lines in a config file, and a small Python script to make the output accessible in a standardised format.

How to run this image

• Install SmartBugs from github.com/smartbugs/smartbugs⁠. For details, see the README there.
• Execute

  ./smartbugs -t ccc -f your_smart_contracts
  

  Copy