echidna

Echidna: A Fast Smart Contract Fuzzer Echidna is a weird creature that eats bugs and is highly electrosensitive with apologies to Jacob Stanley More seriously, Echidna is a Haskell program designed for fuzzing/property-based testing of Ethereum smart contracts. It uses sophisticated grammar-based...

EvilReflex

What's this? This is a simple test for evilReflex vulnerablility in smart constract. How to test? Step 1：compile evilReflex.sol Step 2：deploy HACKME eg: Account Address： 0x62ba0a06ffc1d0a706172e1ed755b9b91f53a617 balance: 10090000000000000000000000 Contract address：...

evm-audit-helpers

evm-audit-helpers Overview evm-audit-helpers is a curated collection of Solidity snippets, Foundry scripts, and test templates designed to accelerate EVM smart‑contract security audits. The repository bundles reusable building blocks for common audit concerns such as reentrancy, storage layout...

BlockChainSec

Project Introduction This project is mainly used to organize and summarize blockchain security-related resources and technical documentation, mainly covering the following aspects: Basic knowledge Protocol analysis Contract auditing Public chain basics Public chain security Security incidents...

Knowledge-Base

SlowMist Security Research A collection of security research by the SlowMist Team. Smart Contract Security Research Blockchain Security Research Exchange Security Research Wallet Security Research...

CVE-batdappboomx

CVE ID CVE-2022-27134 PRODUCT batdappboomx is a public smart contract running in the EOSIO blockchain. This smart contract rewards cryptocurrency to its participants if they pay some cryptocurrency before. Version The latest version of this smart contract. The sha256 hash code of the smart contra...

poorskeme

poorSKeme OSINT - Data Visualization - Blockchain - Awareness - Scam Install Go to this site and click on the downdload button Or go to release section. Download the ZIP file called poorSKeme.zip Unzip it, install requeriments and execute it. unzip poorSKeme.zip cd poorSKeme pip install -r...

ultrafuzz

Ultrafuzz Ultrafuzz is an agentic orchestrator for smart contract fuzzing and threat hunting This tool initializes a protocol repository with editable prompts and topology, runs specialized agents, collects generated fuzz tests and findings, and serves a local dashboard plus final report for...

BlockChainConstruction

Preface In this article, we mainly introduce several aspects of public chain audit which are worthy of attention. For security auditors and public chain developers, this is a project worthy of reference and thinking. Architecture Before introducing the construction of public chain system, let's...

smart-contract-vulnerabilities

Smart Contract Vulnerabilities A collection of smart contract vulnerabilities along with prevention methods. See /references for LLM-optimized references. Access Control Authorization Through tx.origin Insufficient Access Control Delegatecall to Untrusted Callee Signature Malleability Missing...

aether

Aether v6.0 — Smart Contract Security Analysis Framework Version 6.0 | What's New in v6.0 | Changelog Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and validating exploits on mainne...

efcf-framework

EF/CF - the Extremely Fast ethereum smart Contract Fuzzer EF/CF is a new approach to smart contract fuzzing: instead of using a new custom built fuzzer, it repurposes existing fuzzing infrastructure of C/C++ code to smart contracts. Currently, AFL++ is the primarily supported fuzzer, although the...

domestic-system

The Domestic System A beautiful, terminal-based Ethereum wallet and smart contract browser built for sovereignty, security, and style. ━━━━━━━━━━━━━━━━━━━━ domestic system ━━━━━━━━━━━━━━━━━━━━ Overview The Domestic System is a terminal user interface TUI designed for browsing Ethereum EVM account...

CVE-2025-4126

POC-CVE-2025-4126 smart contract reentrancy attack vulnerability 验证 Smart Contract Reentrancy Attack PoC This repository contains a Proof of Concept PoC demonstrating a reentrancy attack vulnerability in Ethereum smart contracts. The PoC includes a vulnerable smart contract, an attacker contract,...

smart-contract-attack-vectors

Smart contract attack vectors The goal of this repository is to compile all possible smart contract vulnerabilities and resources for learning about them. Feel free to submit a pull request, with anything from small fixes to docs or tools you'd like to add. List of Security Vulnerabilities Access...

Decretum

Declarative intent → deterministic execution contract → agent / harness Decretum Decretum turns structured intent into a deterministic execution contract for agents and harnesses. Decretum is a domain-neutral Declarative Execution Compiler. It combines schemas, recipes, profiles,...

CVE-2026-1111-Smart-Contract-Cross-Function-Reentrancy

CVE-2026-1111 – Smart Contract Cross‑Function Reentrancy Program Code Solidity + Python // VulnerableBank.sol - Simplified reentrancy example with cross-function bypass pragma solidity ^0.8.0; contract VulnerableBank mappingaddress = uint256 public balances; function deposit public payable...

evmbench-certora-agent-harness

EVMBench Certora Agent Harness Configurable agent harness for iterative smart-contract spec generation/refinement using: EVMBench-style tasks openai/frontier-evals - project/evmbench Certora Prover Certora/CertoraProver LLM backend: OpenAI API, OpenRouter API, local Ollama, or mock mode What this...

GOATCasino

Welcome to the GOAT Casino! Try your luckor skills at the various games in the casino to win fabulous tokens and prizes! This is under development so there may be a disappointing amount of games at the moment but there are more to come and plenty of things to exploit in the meantime. To Begin: 1...

theo

Theo Obsolete, not maintained anymore, don't install it, don't use it, you were warned! Theo aims to be an exploitation framework and a blockchain recon and interaction tool. Features: Automatic smart contract scanning which generates a list of possible exploits. Sending transactions to exploit a...