
Security News
Risky Biz Podcast: Making Reachability Analysis Work in Real-World Codebases
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
@gnosis.pm/dx-daostack
Advanced tools
[](https://travis-ci.org/gnosis/dx-react?branch=master)
The future of organizations is DAOs. The dxDAO is a next-generation DAO, designed to facilitate global, open trade.
The first dApp governed by the dxDAO will be the DutchX, an open trading protocol for ERC20 tokens using the Dutch auction mechanism. It determines a fair value for tokens, permits trading in low liquidity environments with no third party risk, and mitigates harmful trading practices like front-running
You can find all information and documentation about the DutchX here, and join the discussion in this Forum.
DAOStack's Smart contract Audit:
# Install dependencies
npm install
# In one tab: Run ganache
npm run rpc
# In another tab: Run the tests
npm run test
For running a particular test:
npx truffle test <name-of-the-test>
Local:
npm run migrate
Rinkeby:
npm run migrate -- --network rinkeby
Mainnet:
npm run migrate -- --network mainnet
Make sure the dependencies and addresses are updated:
npm run install
npm run restore
For every contract, you need to get the flattened version.
# Get the list of contracts:
ls -Rl contracts
# Flatten a contract
npx truffle-flattener contracts/DxAvatar.sol > build/DxAvatar.sol
To verify you will need to use the exact version of the compiler:
Check it here:
Verify:
FAQs
[](https://travis-ci.org/gnosis/dx-react?branch=master)
We found that @gnosis.pm/dx-daostack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.