awesome-ethereum-security

Smart contract toolkit

A curated collection of Ethereum security resources and tools to help developers write more secure smart contracts.

A curated list of awesome Ethereum security references

GitHub
1k stars
39 watching
194 forks
last commit: 3 months ago
Linked from 3 awesome lists

ethereumevmsecuritysolidity

Awesome Ethereum Security / Learning / Security references
Comprehensive list of known attack vectors for Solidity
Consensys Best Practices 7,511 4 months ago
Decentralized Application Security Project
Solidity Security Considerations
Solidity v0.5.0 Breaking Changes

Awesome Ethereum Security / Learning / Insecurity references
Awesome Buggy ERC20 Tokens 614 9 months ago
EVM Analyzer Benchmark 40 about 6 years ago
Not So Smart Contracts 2,158 over 1 year ago

Awesome Ethereum Security / Learning / Capture the Flag and Wargames
Capture the Ether
Ethernaut
EtherHack
SI Blockchain CTF
Hands on the Ethernaut CTF Writeups for various Ethernaut CTF challenge contracts
Ethernaut - Naught Coin (ERC20) Exploitation Writeup for a vulnerable ERC20 from the Ethernaut CTF
EtherHack CTF Writeup Writeup for EtherHack CTF challenges
PolySwarm Smart Contract Hacking Challenge Writeup Demonstrates advanced use of Manticore

Awesome Ethereum Security / Learning / Coordinated disclosure
Blockchain Security Contacts 399 8 months ago Security contact info for blockchain projects

Awesome Ethereum Security / Learning / Blogs
Hacking Distributed Emin Gün Sirer, professor in Cornell Tech’s IC3 lab focused on blockchain security
Phil Does Security Phil Daian, grad student behind KEVM, Hydra, and other Ethereum academic projects
Trail of Bits Cybersecurity R&D firm with a blockchain security practice
Martin Holst Swende Martin Swende, programmer and appsec consultant
SmartDec blog Company blog about security issues and practices within blockchain ecosystem

Awesome Ethereum Security / Learning / Notable blog posts
Contract upgrade anti-patterns
How the winner got Fomo3D prize — A Detailed Explanation
How to debug Solidity Smart Contracts with Tenderly and Truffle
Lashing out at a Spank Channel
Malicious GasToken Minting
Missing return value bug in ERC20 tokens
Not A Fair Game – Fairness Analysis of Dice2win
Initial Formal Verification of Ethereum Casper Protocol
Security considerations for Shamir's secret sharing
SmartDec smart contract audit beginner's guide
The Anatomy of a Block Stuffing Attack
The phenomenon of smart contract honeypots
Use our suite of Ethereum security tools
Vertcoin (VTC) was successfully 51% attacked

Awesome Ethereum Security / Learning / Conference talks
Predicting Random Numbers in Ethereum Smart Contracts
Blockchain Autopsies - Analyzing Smart Contract Deaths 1,482 21 days ago
Rattle - an EVM binary analysis framework
Blackhat Ethereum 1,482 21 days ago
Smashing Ethereum Smart Contracts for Fun and Profit 168 over 5 years ago
Automatic Bug Finding for the Blockchain 1,482 21 days ago

Awesome Ethereum Security / Learning / Podcasts and Episodes
CoinSec Podcast
The Smartest Contract
Zero Knowledge
The Smartest Contract #15 Trail of Bits’ Outlook on Security w/ JP Smith
The Smartest Contract #8 Smart Contract Security and Honeypots w/ Gerhard Wagner
Zero Knowledge #29 The DAO, the White Hat Hacker Group & Giveth w/ Griff Green
Zero Knowledge #16 Talking security with JP Smith from Trail of Bits
Risky Business #488 JP Smith about all things blockchain

Awesome Ethereum Security / Tools / Visualization
ethereum-graph-debugger 352 over 1 year ago A graphical EVM debugger. Displays the entire program control flow graph
Slither 5,340 10 days ago Slither can map method visibility and modifiers, state variables that are read and written, calls, and can print the inheritance graph of a smart contract
Solgraph 1,018 almost 2 years ago Generates DOT graphs with function control flow of a solidity contract
Surya 1,088 2 months ago Generates various visual outputs of function call graphs
sol-function-profiler 80 about 6 years ago Solidity contract function profiler

Awesome Ethereum Security / Tools / Linters
Remix Browser-based Solidity IDE with linting features
SmarrtCheck A linter for Solidity and Vyper that checks code for security issues and bad practices
Solhint 1,039 3 months ago Linter for both security and style-guide validations. It strictly adheres to the
Solium 927 over 1 year ago Linter for both security and style-guide validations. Does not strictly adhere to the Solidity Style Guide

Awesome Ethereum Security / Tools / Bug finding tools
Echidna 2,749 9 days ago Fuzzer for Ethereum smart contracts. Uses property testing to generate malicious inputs that break smart contracts
Manticore 3,695 about 1 year ago Symbolic execution tool for Ethereum smart contracts that includes detectors for common security flaws
Mythril OSS 3,882 about 1 month ago Open-source security analysis tool for Ethereum smart contracts built around detector modules
Securify 218 almost 5 years ago Static analysis tool from ChainSecurity
Slither 5,340 10 days ago Static analysis framework, written in Python, with detectors for many common Solidity issues

Awesome Ethereum Security / Tools / Verification tools
KEVM 509 7 days ago K Semantics of the Ethereum Virtual Machine (EVM)
Manticore 3,695 about 1 year ago Symbolic execution tool for EVM

Awesome Ethereum Security / Tools / Reversing tools
abi-decompiler 217 over 2 years ago EVM reverse engineering helper utility
ethereum-dasm 219 over 5 years ago EVM disassembler with static and dynamic analysis abilities, including function signature lookup
Ethersplay 842 about 1 year ago Visual disassembler for EVM bytecode built on Binary Ninja
evmlab 366 over 5 years ago Utilities for interacting with the Ethereum virtual machine
IDA-EVM 308 10 months ago IDA plugin to view EVM instructions
Panoramix
pyevmasm 362 6 months ago EVM assembler and disassembler with a CLI and a Python API
Rattle 350 about 1 year ago EVM binary static analysis framework. Produces SSA representations of EVM code

Awesome Ethereum Security / Tools / Custody
Subzero Subzero is an HSM-backed method for cold storage of Bitcoin developed by Square

Awesome Ethereum Security / Communities
Enterprise Ethereum Alliance Security Task Force
Empire Hacking Slack #ethereum

Awesome Ethereum Security / Other Awesome Lists
Awesome AppSec 6,329 5 months ago
Awesome Ethereum Virtual Machine 841 10 months ago
Awesome Solidity 6,584 3 months ago
Crypto projects that might not suck 423 almost 2 years ago

Backlinks from these awesome lists:

More related projects: