Trail of Bits' open-source static analysis framework for Solidity — catches vulnerabilities before auditors do
Last updated: June 2026
Slither is the most widely used static analysis framework for Solidity smart contracts, built and maintained by Trail of Bits — one of the most respected security firms in the industry. It analyzes Solidity source code without executing it, detecting 80+ vulnerability patterns including reentrancy, integer overflow/underflow, access control issues, unchecked return values, incorrect ERC implementations, and dozens of other common vulnerabilities. Slither runs in seconds to minutes on most codebases, making it practical to run on every commit as part of a CI/CD pipeline. The detector system is extensible: you can write custom detectors for project-specific invariants or suppress false positives through inline comments. Slither's printer modules produce high-level summaries of your codebase: inheritance graphs, call graphs, function visibility overviews, and storage slot layouts — invaluable for understanding large codebases quickly. The slitherin plugin collection adds community-contributed detectors beyond the core set. Professional smart contract audit firms including Trail of Bits, OpenZeppelin, and Consensys Diligence run Slither as the first pass before manual review. Running Slither before submitting to an audit eliminates a significant number of low and medium severity issues that would otherwise increase audit cost.
Slither offers a free plan.
Slither
Free
| Feature | Slither |
|---|---|
| Local Node | ✗ |
| Static Analysis | ✓ |
| Language | Solidity |
| Test Framework | N/A (analysis tool) |
| Plugin Ecosystem | slitherin + custom detectors |
| Debugging | ✗ |
| Deployment System | N/A |
| Open Source | ✓ |
| Fuzz Testing | ✗ |
| Ci Cd Ready | ✓ |
Yes, Slither has a free plan.
Slither is used for trail of bits' open-source static analysis framework for solidity — catches vulnerabilities before auditors do. It's primarily used by Web3 teams in the Web3 Developer Tools category.
See our full alternatives comparison at web3tools.directory/alternatives/slither.
Slither has a rating of 4.6/5 based on 2840 reviews. Key strength: 80+ vulnerability detectors catch reentrancy, access control, and overflow issues before deployment. Main limitation: False positive rate requires review — not all flagged issues are real vulnerabilities.
Get started for free — no credit card required.