What Is Slither?

Slither is written in Python and run from the command line. It analyzes contract code from the compiler output, converts it into its own intermediate representation and then searches for known bug patterns with a large number of ready-made 'detectors'. These patterns include reentrancy vulnerabilities, uninitialized storage variables, external calls whose result is not checked, dangerous use of 'tx.origin' and shadowed variables.

The tool does not merely produce warnings; it also provides summaries showing the contract's functions, its inheritance structure and which function modifies which state variable. This is why it is used by auditing firms and developers as one of the first steps of code review. It can work with Hardhat and Foundry projects and can be added to continuous integration (CI) pipelines so that an automatic check runs on every code change.

Static analysis tools have limits. Slither can produce false positives and generally cannot catch errors specific to business logic, such as flawed economic design or a price calculation vulnerable to oracle manipulation. For this reason, Slither is a complementary tool used together with unit tests, fuzzing and expert audits.