Blog

Remix during auditing

Most auditors are completely underestimating the power of remix during auditing, i am constantly using remix for my auditing purposes, as it helps me with the following things:

1. One can simply copy paste certain functions to inspect, review, and analyze their behavior to identify vulnerabilities, logical flaws, and other issues. A lot of bugs have been found by simply being curious. Specifically for very complex interactions like inline assembly, this is VERY helpful.

2. If you are not in the mood to setup a foundry environment or only want to check specific functions, try out dumb ideas or anything else, you can quickly check for compilation issues, though, that is nothing i am doing nowadays.

3. You can interact with deployed contracts.

!!! DON’T DO THIS TO TEST OUT LIVE VULNERABILITIES !!!

4. You can quickly debug certain flows, which often helps to assess specific mid-function states. Specifically for faulty state ideas this can be very helpful.