3877 matches found
echidna
Echidna: A Fast Smart Contract Fuzzer Echidna is a weird creature that eats bugs and is highly electrosensitive with apologies to Jacob Stanley More seriously, Echidna is a Haskell program designed for fuzzing/property-based testing of Ethereum smart contracts. It uses sophisticated grammar-based...
smart-contract-vulnerabilities
Smart Contract Vulnerabilities A collection of smart contract vulnerabilities along with prevention methods. See /references for LLM-optimized references. Access Control Authorization Through tx.origin Insufficient Access Control Delegatecall to Untrusted Callee Signature Malleability Missing...
theo
Theo Obsolete, not maintained anymore, don't install it, don't use it, you were warned! Theo aims to be an exploitation framework and a blockchain recon and interaction tool. Features: Automatic smart contract scanning which generates a list of possible exploits. Sending transactions to exploit a...
owasp-scs
OWASP Smart Contract Security SCS Join the OWASP Smart Contract Security Slack Discussions and Support This is the official GitHub Repository of the OWASP Smart Contract Security SCS project. This comprehensive initiative provides security standards, guidance, and resources for smart contract...
aether
Aether v6.0 — Smart Contract Security Analysis Framework Version 6.0 | What's New in v6.0 | Changelog Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and validating exploits on mainne...
bithoven
Bithoven 🎼 A High-Level, Imperative Language for Bitcoin Smart Contracts Bithoven is a type-safe, developer-friendly programming language designed to compile down to native Bitcoin Script. It bridges the gap between complex smart contract logic and the low-level stack machine of the Bitcoin Virtu...
EvilReflex
What's this? This is a simple test for evilReflex vulnerablility in smart constract. How to test? Step 1：compile evilReflex.sol Step 2：deploy HACKME eg: Account Address： 0x62ba0a06ffc1d0a706172e1ed755b9b91f53a617 balance: 10090000000000000000000000 Contract address：...
batchOverflow
batchOverflow A fix for the batchOverflow bug found by the PeckShield team. a fix The original contract only did a check to ensure the sender has enough whatever to pay the total amount input value x number of addresses. If an overflow ocurred this amount can be zero, which would allow the test o...
CVE-2025-4126
POC-CVE-2025-4126 smart contract reentrancy attack vulnerability 验证 Smart Contract Reentrancy Attack PoC This repository contains a Proof of Concept PoC demonstrating a reentrancy attack vulnerability in Ethereum smart contracts. The PoC includes a vulnerable smart contract, an attacker contract,...
theo
Theo Obsoleto, ya no se mantiene, no lo instales, no lo uses, ¡estás advertido! Theo pretende ser un framework de explotación y una herramienta de reconocimiento e interacción con blockchain. Características: Escaneo automático de contratos inteligentes que genera una lista de posibles exploits...
ultrafuzz
Ultrafuzz Ultrafuzz is an agentic orchestrator for smart contract fuzzing and threat hunting This tool initializes a protocol repository with editable prompts and topology, runs specialized agents, collects generated fuzz tests and findings, and serves a local dashboard plus final report for...
CVE-2026-1111-Smart-Contract-Cross-Function-Reentrancy
CVE-2026-1111 – Smart Contract Cross‑Function Reentrancy Program Code Solidity + Python // VulnerableBank.sol - Simplified reentrancy example with cross-function bypass pragma solidity ^0.8.0; contract VulnerableBank mappingaddress = uint256 public balances; function deposit public payable...
smart-contract-attack-vectors
Smart contract attack vectors The goal of this repository is to compile all possible smart contract vulnerabilities and resources for learning about them. Feel free to submit a pull request, with anything from small fixes to docs or tools you'd like to add. List of Security Vulnerabilities Access...
evm-audit-helpers
evm-audit-helpers Overview evm-audit-helpers is a curated collection of Solidity snippets, Foundry scripts, and test templates designed to accelerate EVM smart‑contract security audits. The repository bundles reusable building blocks for common audit concerns such as reentrancy, storage layout...
efcf-framework
EF/CF - the Extremely Fast ethereum smart Contract Fuzzer EF/CF is a new approach to smart contract fuzzing: instead of using a new custom built fuzzer, it repurposes existing fuzzing infrastructure of C/C++ code to smart contracts. Currently, AFL++ is the primarily supported fuzzer, although the...
BlockChainConstruction
Preface In this article, we mainly introduce several aspects of public chain audit which are worthy of attention. For security auditors and public chain developers, this is a project worthy of reference and thinking. Architecture Before introducing the construction of public chain system, let's...
evmbench-certora-agent-harness
EVMBench Certora Agent Harness Configurable agent harness for iterative smart-contract spec generation/refinement using: EVMBench-style tasks openai/frontier-evals - project/evmbench Certora Prover Certora/CertoraProver LLM backend: OpenAI API, OpenRouter API, local Ollama, or mock mode What this...
octopus
Octopus Huge thanks to QuoScient for having sponsored this project. Octopus is a security analysis framework for WebAssembly module and Blockchain Smart Contract. The purpose of Octopus is to provide an easy way to analyze closed-source WebAssembly module and smart contracts bytecode to understan...
GOATCasino
Welcome to the GOAT Casino! Try your luckor skills at the various games in the casino to win fabulous tokens and prizes! This is under development so there may be a disappointing amount of games at the moment but there are more to come and plenty of things to exploit in the meantime. To Begin: 1...