github / github/codeql

Rust for Web 3.0

Open
#20,456 2 comments 1 reaction 0 assignees View on GitHub
question
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

**Description of the issue**

* Given Rust's growing adoption in Web3 and DeFi ecosystems, I’d like to propose adding new CodeQL queries that target recurring vulnerability patterns specific to these domains—such as unchecked authority, unsafe deserialization, and CPI-based reentrancy. These issues often follow consistent structures and could be systematically detected to improve security coverage for Rust smart contracts.

I’d love to contribute to expanding CodeQL’s coverage for Rust-based DeFi vulnerabilities since I have participated in many rust audit contest

Contributor guide

Open the contributing guide

Research direction

The issue names no files, tests, or entry points. Start by reviewing the repository’s existing Rust query coverage and narrowing the proposal to specific unchecked-authority, unsafe-deserialization, or CPI-reentrancy patterns. Done would require a defined, testable set of CodeQL queries for the selected vulnerability patterns.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
blockchain, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.