echidna

Echidna: Un Fuzzer Rápido para Smart Contracts Echidna es una criatura extraña que come insectos y es altamente electrosensible con disculpas a Jacob Stanley Más en serio, Echidna es un programa en Haskell diseñado para fuzzing/pruebas basadas en propiedades de smart contracts de Ethereum. Utiliz...

bithoven

Bithoven 🎼 A High-Level, Imperative Language for Bitcoin Smart Contracts Bithoven is a type-safe, developer-friendly programming language designed to compile down to native Bitcoin Script. It bridges the gap between complex smart contract logic and the low-level stack machine of the Bitcoin Virtu...

EvilReflex

What's this? This is a simple test for evilReflex vulnerablility in smart constract. How to test? Step 1：compile evilReflex.sol Step 2：deploy HACKME eg: root@kitploit: Account Address： 0x62ba0a06ffc1d0a706172e1ed755b9b91f53a617 balance: 10090000000000000000000000 Contract address：...

owasp-scs

OWASP Smart Contract Security SCS Join the OWASP Smart Contract Security Slack Discussions and Support This is the official GitHub Repository of the OWASP Smart Contract Security SCS project. This comprehensive initiative provides security standards, guidance, and resources for smart contract...

smart-contract-vulnerabilities

Smart Contract Vulnerabilities A collection of smart contract vulnerabilities along with prevention methods. See /references for LLM-optimized references. Access Control Authorization Through tx.origin Insufficient Access Control Delegatecall to Untrusted Callee Signature Malleability Missing...

aether

Aether v6.0 — Marco de análisis de seguridad de contratos inteligentes Versión 6.0 | Novedades en v6.0 | Registro de cambios Aether es un marco basado en Python para analizar contratos inteligentes Solidity, generar hallazgos de vulnerabilidades, producir pruebas de concepto PoC basadas en Foundr...

theo

Theo Obsoleto, ya no se mantiene, no lo instales, no lo uses, ¡estás advertido! Theo pretende ser un framework de explotación y una herramienta de reconocimiento e interacción con blockchain. Características: Escaneo automático de contratos inteligentes que genera una lista de posibles exploits...

theo

Theo Obsolete, not maintained anymore, don't install it, don't use it, you were warned! Theo aims to be an exploitation framework and a blockchain recon and interaction tool. Features: Automatic smart contract scanning which generates a list of possible exploits. Sending transactions to exploit a...

smart-contract-attack-vectors

Smart contract attack vectors The goal of this repository is to compile all possible smart contract vulnerabilities and resources for learning about them. Feel free to submit a pull request, with anything from small fixes to docs or tools you'd like to add. List of Security Vulnerabilities Access...

evm-audit-helpers

evm-audit-helpers Overview evm-audit-helpers is a curated collection of Solidity snippets, Foundry scripts, and test templates designed to accelerate EVM smart‑contract security audits. The repository bundles reusable building blocks for common audit concerns such as reentrancy, storage layout...

efcf-framework

EF/CF - the Extremely Fast ethereum smart Contract Fuzzer EF/CF is a new approach to smart contract fuzzing: instead of using a new custom built fuzzer, it repurposes existing fuzzing infrastructure of C/C++ code to smart contracts. Currently, AFL++ is the primarily supported fuzzer, although the...

CVE-batdappboomx

CVE ID CVE-2022-27134 PRODUCT batdappboomx is a public smart contract running in the EOSIO blockchain. This smart contract rewards cryptocurrency to its participants if they pay some cryptocurrency before. Version The latest version of this smart contract. The sha256 hash code of the smart contra...

CVE-2026-100248

The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of currentadmin...

EUVD-2026-87152

The Rattadan Cosmowarp smart contract before 56c6147 can have a comparison to an unintended value of currentadmin...

BlockChainConstruction

Preface In this article, we mainly introduce several aspects of public chain audit which are worthy of attention. For security auditors and public chain developers, this is a project worthy of reference and thinking. Architecture Before introducing the construction of public chain system, let's...

evmbench-certora-agent-harness

EVMBench Certora Agent Harness Configurable agent harness for iterative smart-contract spec generation/refinement using: EVMBench-style tasks openai/frontier-evals - project/evmbench Certora Prover Certora/CertoraProver LLM backend: OpenAI API, OpenRouter API, local Ollama, or mock mode What this...

octopus

Octopus Muchas gracias a QuoScient por patrocinar este proyecto. Octopus es un marco de análisis de seguridad para módulos WebAssembly y contratos inteligentes de Blockchain. El propósito de Octopus es proporcionar una manera fácil de analizar módulos WebAssembly de código cerrado y bytecode de...

GOATCasino

Welcome to the GOAT Casino! Try your luckor skills at the various games in the casino to win fabulous tokens and prizes! This is under development so there may be a disappointing amount of games at the moment but there are more to come and plenty of things to exploit in the meantime. To Begin: 1...

domestic-system

The Domestic System A beautiful, terminal-based Ethereum wallet and smart contract browser built for sovereignty, security, and style. root@kitploit: ━━━━━━━━━━━━━━━━━━━━ domestic system ━━━━━━━━━━━━━━━━━━━━ Overview The Domestic System is a terminal user interface TUI designed for browsing...

CVE-2025-4126

POC-CVE-2025-4126 smart contract reentrancy attack vulnerability 验证 Smart Contract Reentrancy Attack PoC This repository contains a Proof of Concept PoC demonstrating a reentrancy attack vulnerability in Ethereum smart contracts. The PoC includes a vulnerable smart contract, an attacker contract,...