domestic-system

The Domestic System A beautiful, terminal-based Ethereum wallet and smart contract browser built for sovereignty, security, and style. ━━━━━━━━━━━━━━━━━━━━ domestic system ━━━━━━━━━━━━━━━━━━━━ Overview The Domestic System is a terminal user interface TUI designed for browsing Ethereum EVM account...

owasp-scs

OWASP Smart Contract Security SCS Join the OWASP Smart Contract Security Slack Discussions and Support This is the official GitHub Repository of the OWASP Smart Contract Security SCS project. This comprehensive initiative provides security standards, guidance, and resources for smart contract...

smart-contract-vulnerabilities

Smart Contract Vulnerabilities A collection of smart contract vulnerabilities along with prevention methods. See /references for LLM-optimized references. Access Control Authorization Through tx.origin Insufficient Access Control Delegatecall to Untrusted Callee Signature Malleability Missing...

efcf-framework

EF/CF - the Extremely Fast ethereum smart Contract Fuzzer EF/CF is a new approach to smart contract fuzzing: instead of using a new custom built fuzzer, it repurposes existing fuzzing infrastructure of C/C++ code to smart contracts. Currently, AFL++ is the primarily supported fuzzer, although the...

GOATCasino

Welcome to the GOAT Casino! Try your luckor skills at the various games in the casino to win fabulous tokens and prizes! This is under development so there may be a disappointing amount of games at the moment but there are more to come and plenty of things to exploit in the meantime. To Begin: 1...

theo

Theo Obsolete, not maintained anymore, don't install it, don't use it, you were warned! Theo aims to be an exploitation framework and a blockchain recon and interaction tool. Features: Automatic smart contract scanning which generates a list of possible exploits. Sending transactions to exploit a...

echidna

Echidna: A Fast Smart Contract Fuzzer Echidna is a weird creature that eats bugs and is highly electrosensitive with apologies to Jacob Stanley More seriously, Echidna is a Haskell program designed for fuzzing/property-based testing of Ethereum smart contracts. It uses sophisticated grammar-based...

Decretum

Declarative intent → deterministic execution contract → agent / harness Decretum Decretum turns structured intent into a deterministic execution contract for agents and harnesses. Decretum is a domain-neutral Declarative Execution Compiler. It combines schemas, recipes, profiles,...

evm-audit-helpers

evm-audit-helpers Overview evm-audit-helpers is a curated collection of Solidity snippets, Foundry scripts, and test templates designed to accelerate EVM smart‑contract security audits. The repository bundles reusable building blocks for common audit concerns such as reentrancy, storage layout...

ultrafuzz

Ultrafuzz Ultrafuzz is an agentic orchestrator for smart contract fuzzing and threat hunting This tool initializes a protocol repository with editable prompts and topology, runs specialized agents, collects generated fuzz tests and findings, and serves a local dashboard plus final report for...

Knowledge-Base

SlowMist Security Research A collection of security research by the SlowMist Team. Smart Contract Security Research Blockchain Security Research Exchange Security Research Wallet Security Research...

smart-contract-attack-vectors

Smart contract attack vectors The goal of this repository is to compile all possible smart contract vulnerabilities and resources for learning about them. Feel free to submit a pull request, with anything from small fixes to docs or tools you'd like to add. List of Security Vulnerabilities Access...

BlockChainSec

Project Introduction This project is mainly used to organize and summarize blockchain security-related resources and technical documentation, mainly covering the following aspects: Basic knowledge Protocol analysis Contract auditing Public chain basics Public chain security Security incidents...

aether

Aether v6.0 — Smart Contract Security Analysis Framework Version 6.0 | What's New in v6.0 | Changelog Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and validating exploits on mainne...

bithoven

Bithoven 🎼 Formal Safety for Expressive Bitcoin Smart Contracts Bithoven is a high-level, imperative language for Bitcoin smart contracts. It compiles to native Bitcoin Script for legacy P2SH, segwit P2WSH and taproot P2TR outputs. You write readable contracts with if/else, named and typed witnes...

CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle

10. CVE-2026-9998 – Insecure Deserialization in Blockchain Oracle Overview A blockchain oracle node deserializes data from a smart contract event using Python’s pickle, allowing an attacker to execute arbitrary commands. Severity: Critical Full Node Compromise Oracle Simulation & Exploit...

CVE-2025-4126

POC-CVE-2025-4126 smart contract reentrancy attack vulnerability 验证 Smart Contract Reentrancy Attack PoC This repository contains a Proof of Concept PoC demonstrating a reentrancy attack vulnerability in Ethereum smart contracts. The PoC includes a vulnerable smart contract, an attacker contract,...

batchOverflow

batchOverflow A fix for the batchOverflow bug found by the PeckShield team. a fix The original contract only did a check to ensure the sender has enough whatever to pay the total amount input value x number of addresses. If an overflow ocurred this amount can be zero, which would allow the test o...

poorskeme

poorSKeme OSINT - Data Visualization - Blockchain - Awareness - Scam Install Go to this site and click on the downdload button Or go to release section. Download the ZIP file called poorSKeme.zip Unzip it, install requeriments and execute it. unzip poorSKeme.zip cd poorSKeme pip install -r...

evmbench-certora-agent-harness

EVMBench Certora Agent Harness Configurable agent harness for iterative smart-contract spec generation/refinement using: EVMBench-style tasks openai/frontier-evals - project/evmbench Certora Prover Certora/CertoraProver LLM backend: OpenAI API, OpenRouter API, local Ollama, or mock mode What this...