Awesome GitHub RepositoriesSecurity Analysis Tools

Mythril is an Ethereum Virtual Machine smart contract security analyzer that uses symbolic execution to identify vulnerabilities in bytecode before deployment. It functions as a vulnerability scanner and formal auditor, treating program inputs as mathematical symbols to prove the presence of bugs in contract logic. The tool performs bytecode-level analysis to detect flaws that may be hidden by high-level compilers. It integrates SMT solvers to determine if specific vulnerability states are reachable and compares symbolic execution traces against a library of known security flaw signatures. T

Manticore is a symbolic execution engine designed for the analysis of binary executables and smart contracts. It functions as an automated vulnerability scanner and verification platform that systematically traverses program execution paths to identify security flaws, validate business invariants, and ensure software properties hold true under all possible input conditions. The engine distinguishes itself through a unified instruction set abstraction that enables consistent analysis across diverse architectures and contract formats. It provides a programmatic interface for deep customization,

Comprehensive list of known attack vectors and common anti-patterns

An Analysis Tool for Smart Contracts

Tool to search secrets in various filetypes.

Visualize Solidity control flow for smart contract security analysis. :dollar: ⇆ :dollar:

EVM dissassembler

A Collection of Vulnerabilities in ERC20 Smart Contracts With Tokens Affected

Faction is now an OWASP Project! You can find more information here

EVM disassembler

Slither Detectors by Pessimistic.io

Framework for cryptoeconomic contract security, decentralized security bounties. Live on Ethereum.

This is solc-verify, a modular verifier for Solidity.

The SECBIT Static Analysis Extension to Solidity Compiler