awesome-ethereum-security

Writeups for various Ethernaut CTF challenge contracts

Writeup for a vulnerable ERC20 from the Ethernaut CTF

Writeup for EtherHack CTF challenges

Demonstrates advanced use of Manticore

Blockchain Security Contacts

Security contact info for blockchain projects

Emin Gün Sirer, professor in Cornell Tech’s IC3 lab focused on blockchain security

Phil Daian, grad student behind KEVM, Hydra, and other Ethereum academic projects

Cybersecurity R&D firm with a blockchain security practice

Martin Swende, programmer and appsec consultant

Company blog about security issues and practices within blockchain ecosystem

Trail of Bits’ Outlook on Security w/ JP Smith

Smart Contract Security and Honeypots w/ Gerhard Wagner

The DAO, the White Hat Hacker Group & Giveth w/ Griff Green

Talking security with JP Smith from Trail of Bits

JP Smith about all things blockchain

ethereum-graph-debugger

A graphical EVM debugger. Displays the entire program control flow graph

Slither

Slither can map method visibility and modifiers, state variables that are read and written, calls, and can print the inheritance graph of a smart contract

Solgraph

Generates DOT graphs with function control flow of a solidity contract

Surya

Generates various visual outputs of function call graphs

sol-function-profiler

Solidity contract function profiler

Browser-based Solidity IDE with linting features

A linter for Solidity and Vyper that checks code for security issues and bad practices

Solhint

Linter for both security and style-guide validations. It strictly adheres to the

Solium

Linter for both security and style-guide validations. Does not strictly adhere to the Solidity Style Guide

Echidna

Fuzzer for Ethereum smart contracts. Uses property testing to generate malicious inputs that break smart contracts

Manticore

Symbolic execution tool for Ethereum smart contracts that includes detectors for common security flaws

Mythril OSS

Open-source security analysis tool for Ethereum smart contracts built around detector modules

Securify

Static analysis tool from ChainSecurity

Slither

Static analysis framework, written in Python, with detectors for many common Solidity issues

KEVM

K Semantics of the Ethereum Virtual Machine (EVM)

Manticore

Symbolic execution tool for EVM

abi-decompiler

EVM reverse engineering helper utility

ethereum-dasm

EVM disassembler with static and dynamic analysis abilities, including function signature lookup

Ethersplay

Visual disassembler for EVM bytecode built on Binary Ninja

evmlab

Utilities for interacting with the Ethereum virtual machine

IDA-EVM

IDA plugin to view EVM instructions

pyevmasm

EVM assembler and disassembler with a CLI and a Python API

Rattle

EVM binary static analysis framework. Produces SSA representations of EVM code

Subzero is an HSM-backed method for cold storage of Bitcoin developed by Square

#ethereum