I have to analyse some static Analysis tools against well documented vulnerabilities. My questions are ;
- Can we use the provided sample contracts (in above link) directly or not ?
- If not, then where should I can find such real vulnerable contracts?
- If i want to download previously attacked smart contracts (i.e. DAO, parity, etc.), are they still available to test by open source static tools or not ?
- The list of vulnerabilities in above link is completed/updated or not , in term of exposed/known vulnerabilities till today?
Any useful suggestion toward performing and contributing in static analysis domain , will be appreciated !