github.com / ShiftDeFi

ShiftDeFi/shift-defi-platform

Solidity·205 files·commit 18c086b·scanned 4d ago·cached ✓

23/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

verdict accurate?

threat-state: lowlive

FINDINGS ░▒▓

warningSolidity inline assemblyInline assembly hides logic from high-level analysis and is often used in obfuscated exploits.contracts/CowProtocolModule.sol

        CowProtocolModuleStorage storage $;
        assembly {
            $.slot := COW_PROTOCOL_MODULE_STORAGE_LOCATION
        }

warningSolidity inline assemblyInline assembly hides logic from high-level analysis and is often used in obfuscated exploits.contracts/MessageRouter.sol

        uint256 nonce;
        assembly {
            nonce := mload(add(message, 32))
        }

warningSolidity inline assemblyInline assembly hides logic from high-level analysis and is often used in obfuscated exploits.contracts/libraries/Codec.sol

    function _writeUint8(bytes memory buffer, uint8 value, uint256 variablePosition) internal pure {
        assembly {
            // Calculate offset: buffer pointer + WORD_SIZE (skip length) + posi...

warningSuspicious Solidity ownership patternPatterns that silently transfer ownership or allow arbitrary address control are common in scam contracts.test/mocks/MockCowProtocolAdapter.sol

    constructor(address owner_) {
        _owner = owner_;
    }

infoAuthor has no other public repositoriesGitHub user "shift-developer-2" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

183 files scanned @ 18c086b | 10/25/2026 | heuristic scan — always review manually

risk by category

code execution0

network & exfiltration0

file system access0

obfuscation15

supply chain6

owasp / injection0

telemetry

files 183/205rules hit 5engine v7commit 18c086b

github

ShiftDeFi/shift-defi-platform

Solidity

430d

205 files

183 scanned(89%)

18c086b

architecture░▒▓

entry (165) flagged (9) pkg (107)

285 nodes · 809 edgesscroll to zoom · click node to jump to finding