web3-decoder

Web3 Decoder Web3 Decoder is a Burp Suite Extension that helps to analyze what is going on with the operations involving smart contracts of the web3. This is mainly JSON-RPC calls to Ethereum Nodes, and nodes of other compatible networks like Polygon, Arbitrum, BSC... Download & Install Download...

GlacierCTF2023_writeups

Glacierctf 2023 Description CTF date: 24.11.2023 - 26.11.2023 Duration: 48 hours CTF Time: https://ctftime.org/event/1992 GlacierCTF 2023 was the second edition of the jeopardy-style CTF organized by LosFuzzys. The CTF featured challenges in various categories, including pwn, rev, web, crypto,...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

raptor

Raptor Raptor es un framework para auditar el ecosistema blockchain contratos, protocolos, etc.. Resumen Raptor proporciona enfoques estructurados y herramientas para identificar vulnerabilidades de seguridad en contratos inteligentes y protocolos blockchain. El framework ayuda a los auditores a...

C2-Blockchain

C2-Blockchain Esto es un C2 implementado sobre contratos inteligentes de Ethereum basados en el servidor de TestNet de Ropsten Para leer más sobre cómo hicimos esta prueba de concepto, consulta la serie aquí. Hemos explicado todo, desde la introducción a blockchain hasta el uso de contratos...

ManticoreUI

Manticore UI .. image:: https://raw.githubusercontent.com/trailofbits/manticore/master/docs/images/manticore.png :width: 200px :align: center :alt: Manticore El proyecto Manticore User Interface MUI proporciona un complemento de interfaz gráfica de usuario para diferentes desensambladores que...

slither

Slither, the smart contract static analyzer Join the Empire Hacking Slack - Discussions and Support Slither is a Solidity & Vyper static analysis framework written in Python3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to...

honeypotscan

Apoya el Desarrollo Si este proyecto te ayuda en tu trabajo, apoya el mantenimiento continuo y las nuevas funciones. Billetera de donación ETH 0x11282eE5726B3370c8B480e321b3B2aA13686582 Escanea el código QR o copia la dirección de la billetera anterior. 🛡️ HoneypotScan Verifica si un token es una...

BlockchainC2

BlockchainC2 BlockchainC2 es un pequeño servidor/agente POC para evaluar cómo la Blockchain específicamente la funcionalidad de Smart Contracts de Ethereum puede ser utilizada por un atacante para C2. Los detalles sobre esta aplicación se pueden encontrar aquí. Smart Contract El Smart Contract...

WordPress WPSmartContracts <1.3.12 - SQL Injection

WordPress WPSmartContracts plugin before 1.3.12 contains a SQL injection vulnerability. The plugin does not properly sanitize and escape a parameter before using it in a SQL statement. An attacker with a role as low as author can possibly obtain sensitive information, modify data, and/or execute...

ghidra-evm

Ghidra EVM Module In the last few years, attacks on deployed smart contracts in the Ethereum blockchain have ended up in a significant amount of stolen funds due to programming mistakes. Since smart contracts, once compiled and deployed, are complex to modify and update different practitioners ha...

ghidra-evm

Módulo Ghidra EVM En los últimos años, los ataques a contratos inteligentes desplegados en la cadena de bloques de Ethereum han resultado en una cantidad significativa de fondos robados debido a errores de programación. Dado que los contratos inteligentes, una vez compilados y desplegados, son...

web3-decoder

Web3 Decoder Web3 Decoder is a Burp Suite Extension designed for analyzing blockchain operations and smart contract interactions. It processes JSON-RPC calls to Ethereum and compatible networks including Polygon, Arbitrum, BSC, and others Block explorers API Keys Most block explorers supported,...

Web3Bugs

Demystifying Exploitable Bugs in Smart Contracts This project aims to provide a valuable resource for Web3 developers and security analysts by facilitating their understanding of exploitable bugs in smart contracts. We conduct a thorough analysis of exploitable bugs extracted from code4rena and...

manticore

⚠️ Project is archived ⚠️ This project is no longer internally developed and maintained. Manticore Manticore is a symbolic execution tool for the analysis of smart contracts and binaries. Features Program Exploration : Manticore can execute a program with symbolic inputs and explore all the...

SoliditySecurity

What's this This post aims to be a relatively in-depth and up-to-date introductory post detailing the past mistakes that have been made by Solidity developers in an effort to prevent future devs from repeating history. Table of Contents 1. Re-Entrancy The Vulnerability Preventative Techniques...

Resource-Optimized and Energy-Aware Agentic AI Framework Anchored on Blockchain for Secure Software Supply Chains

This paper proposes a blockchain-backed agentic security framework designed to safeguard the complete software development lifecycle SDLC while also securing the agentic AI components responsible for monitoring it. The framework coordinates a set of specialised security agents, covering source...

EventSpec: Defining and Detecting Event-Semantic Issues in Blockchain Ecosystems

In recent years, smart contracts have become the backbone of decentralized applications DApps, and off-chain systems such as bridges, wallets, and indexers rely heavily on event logs to track contract execution and state changes. However, the Ethereum Virtual Machine EVM does not validate or...

Automated Vulnerability Injection in Smart Contracts Using Large Language Models

Assessing vulnerability detection tools for smart contracts requires datasets with known ground truth, yet such datasets are scarce and difficult to build by hand. We propose an approach that uses Large Language Models LLMs to automatically inject vulnerabilities into Solidity smart contracts, an...

Smart Contracts Claimed Vulnerable by the CVE Database, with Labels and Source Locations

The Common Vulnerabilities and Exposures CVE database catalogs vulnerability claims in hard- and software, among them those pertaining to blockchain programs a.k.a. smart contracts. We present CVE-Smart-Contracts, a curated dataset of CVE records up to July 2026 referring to Ethereum smart...