First Flight #16: Mafia Takedown

Summary

This is a more general finding in that the Makefile contains very useful security analysis tools although it is evident that they have not been heeded.

Vulnerability Details

I know this is a criminal organisation's codebase, but the ignoring of advice is itself criminal.

Impact

Some of the problems already highlighted are listed out in the slither and aderyn reports. Even a simple pass with an AI for the Laundrette contract highlights some of the core problems with this code. These have huge impacts on the overall system.

Tools Used

slither, aderyn, github copilot, jetbrains ai assistant.

Recommendations

Heed advice, even if you think you are above the law.