Audit Tools

Slither Detector

A Slither detector is a rule that identifies a specific Solidity or Vyper code pattern, vulnerability class, or audit concern.

A Slither detector is one check inside Slither's scan.

Slither Detector Explained in Detail

Slither detectors are individual checks inside Slither. Each detector looks for a pattern such as reentrancy risk, unchecked low-level calls, dangerous tx.origin, unused return values, or upgradeability issues.

Some detectors are high-confidence. Others are hints that require manual review.

Smart contract example

slither . --detect reentrancy-eth

This runs a specific detector instead of the full detector set.

Slither Detector in Auditing

Detectors automate repeatable checks. They are useful when scanning large codebases and when validating that known risky patterns do not reappear.

Auditors still decide whether detector output is reachable, exploitable, and relevant.

Red flags in code

  • Detector warnings are suppressed without explanation.

  • Only default detectors are used when the project has custom risk patterns.

  • Informational findings are ignored even when they reveal structure.

  • Inheritance and upgradeability context are not reviewed.

  • A detector name is treated as final impact.

How to test or review it

  • Run the full detector set first, then targeted detectors for high-risk areas.

  • Review detector documentation before dismissing a result.

  • Track suppressions and their reasons.

  • Use printers to understand entry points, modifiers, and state writes.

  • Consider custom detectors for repeated project-specific issues.

Sources