第三届中国Rust开发者大会 Rustle: the first static analyzer for smart contracts in Rust Matthew Jiang Director of Security Team @ BlockSec Motivation Background Design 1 2 3 Capability Usability Conclusion Conclusion 4 5 6 Outline Motivation Why do we develop Rustle? Emerging chains with Rust as smart contracts language Motivation Limitations of manual audit •Time-consuming •Expensive •Skilled auditors security issues • Rustle currently supports 30 different detectors • For the complete list, refer to https://github.com/blocksectea m/rustle#detectors Capability Real case Capability Rustle’s Result: