Misti

Misti is a static analysis tool designed for smart contracts on the TON blockchain.

Language Support:

• Tact 1.5.1 is supported.
• Support for FunC is planned.

Getting Started

1. Install Soufflé according to the official installation instruction.

2. Misti is distributed via npm and should be added to your Tact project in the same way as Tact itself:

yarn add @nowarp/misti

3. Run Misti by specifying a Tact project configuration:

npx misti test/projects/simple/tactConfig.json

Use Cases

• Detect Vulnerabilities: Identify and fix potential security flaws early in the development cycle.
• Improve Code Quality: Maintain high standards by catching bugs and enforcing best practices automatically.
• Streamline Development: Integrate Misti into your CI/CD pipeline to ensure continuous code quality checks.
• Custom Detectors: Create custom detectors to solve specific problems in your code or to provide a thorough security review if you are an auditor.

Resources

• Misti Documentation provides a detailed overview of the built-in detectors, the architecture of the analyzer, and developer documentation.
• Misti API Reference is useful if you are going to contribute or create your own detectors to streamline your audit.
• Misti Blueprint Plugin is a plugin for the Blueprint Framework that simplifies your workflow with Misti.

Community

• Misti Discussion Group