Updated

- CVE Search
- Integrated CVE Search in Mythril

verifier.py

@@ -2,6 +2,36 @@ import subprocess
 import tempfile
 import json
 import os
+import requests
+
+def search_cve_from_nvd(keyword: str) -> str:
+    """
+    Search for a CVE from NVD API using a keyword.
+    """
+    try:
+        url = "https://services.nvd.nist.gov/rest/json/cves/2.0"
+        params = {
+            "keywordSearch": keyword,
+            "resultsPerPage": 1
+        }
+        headers = {
+            "User-Agent": "SmartContractVerifier/1.0"
+        }
+        response = requests.get(url, params=params, headers=headers, timeout=10)
+        response.raise_for_status()
+
+        data = response.json()
+        items = data.get("vulnerabilities", [])
+
+        if not items:
+            return "No CVE found."
+
+        cve_id = items[0]["cve"]["id"]
+        cve_desc = items[0]["cve"]["descriptions"][0]["value"]
+        return f"{cve_id}: {cve_desc}"
+
+    except Exception as e:
+        return f"Error querying CVE DB: {str(e)}"
 
 def analyze_contract(code: str, language: str, tool: str, run_formal: bool = False):
     """
@@ -75,25 +105,42 @@ def analyze_with_slither(filepath):
 def analyze_with_mythril(filepath):
     try:
         result = subprocess.run(
-            ["myth", "analyze", filepath, "--solv", "0.8.0"],
+            ["myth", "analyze", filepath, "--solv", "0.8.0", "--execution-timeout", "60", "--output", "json"],
             capture_output=True,
             text=True,
-            timeout=30
+            timeout=90
         )
-        raw_output = result.stdout or result.stderr
-        if not raw_output:
-            return ("No issues found.", "No issues were detected by Mythril.")
 
-        issues = raw_output.splitlines()
-        summary = "Vulnerabilities detected by Mythril:\n"
-        for issue in issues:
-            summary += f"- {issue}\n"
+        if result.returncode != 0:
+            return ("Mythril analysis failed.", result.stderr)
+
+        data = json.loads(result.stdout)
+        issues = data.get("issues", [])
+
+        if not issues:
+            return ("No issues found.", "No vulnerabilities detected by Mythril.")
+
+        summary = "🛡️ Vulnerabilities detected by Mythril:\n"
+        cve_report = "\n📄 [Detailed CVE-style Report]\n\n"
 
-        cve_report = "\n[Detailed CVE-style Report]\n\n"
         for issue in issues:
-            cve_report += f"{issue}\n  CVE Reference: CVE-2021-XXXX (simulated)\n\n"
+            title = issue.get("title", "Unknown Issue")
+            description = issue.get("description", "")
+            function = issue.get("function", {}).get("name", "Unknown Function")
+
+            # Real-time CVE lookup
+            cve_info = search_cve_from_nvd(title)
+
+            summary += f"- {title} in {function}\n"
+            cve_report += (
+                f"🔸 Title: {title}\n"
+                f"📍 Function: {function}\n"
+                f"📝 Description: {description}\n"
+                f"🔗 CVE: {cve_info}\n\n"
+            )
+
+        return summary.strip(), cve_report.strip()
 
-        return summary, cve_report
     except Exception as e:
         return ("Mythril analysis failed.", f"Error: {str(e)}")