Projects sharing features with Securify2

Static Analyzer for Solidity and Vyper

This project is a curated directory and index of resources for Solidity smart contract development. It provides a categorized collection of libraries, development frameworks, security tools, and educational materials used to build and deploy decentralized applications. The repository functions as a comprehensive catalog for the software development lifecycle, featuring a specific index of community-vetted modular building blocks and token standard implementations. It also maintains a dedicated list of security resources, including static analyzers and fuzzers, to assist in auditing and securi

This repository is a comprehensive educational curriculum and programming guide designed to teach Solidity development and smart contract testing. It provides a structured set of instructional materials and tutorials for writing, deploying, and auditing secure programmable contracts on the Ethereum Virtual Machine. The course focuses on the Foundry toolkit, providing an Ethereum tooling curriculum that covers compiling and testing smart contracts locally. It emphasizes a professional development workflow, moving from initial Solidity programming to the implementation of decentralized applicat

This project serves as a comprehensive knowledge base and technical reference for identifying and mitigating security vulnerabilities in smart contracts. It provides a structured catalog of common attack vectors, logic errors, and insecure coding patterns, offering developers and auditors a centralized resource for implementing secure decentralized applications. The repository distinguishes itself by covering the full lifecycle of contract security, from low-level arithmetic safety and compiler constraints to high-level architectural patterns. It details specific defensive strategies for mana

Foundry is an Ethereum smart contract development toolkit and blockchain simulator designed for compiling, testing, and deploying contracts for the Ethereum Virtual Machine. It provides a local environment for simulating blockchain state and forking live networks to execute code without modifying the actual chain. The project features a property-based fuzzing engine to identify edge-case failures in contract logic and a transaction debugger for analyzing detailed execution traces and gas consumption. It enables developers to mirror the state of a remote chain locally to test against real-worl

Vyper is a security-focused, typed programming language and compiler designed for creating smart contracts that execute on the Ethereum Virtual Machine. It utilizes a Pythonic syntax to define contract logic and state, serving as a target for formal verification to allow for machine-checked proofs of correctness. The language distinguishes itself through strict architectural constraints that prioritize predictability and security. It enforces acyclic call graphs by prohibiting recursion and mandates bounded loops to ensure static gas prediction. Additionally, it features a native fixed-point

This repository serves as a structured archive of cybersecurity training exercises designed for hands-on practice across multiple technical domains. It functions as a collection of intentionally vulnerable challenges that provide users with the source files and documentation necessary to develop proficiency in security analysis and software vulnerability research. The project distinguishes itself by organizing these exercises into a hierarchical directory structure, ensuring that security scenarios remain consistent and reproducible through version-controlled static assets. Each challenge is

This project is a comprehensive educational guide and technical manual for the Ethereum blockchain. It provides structured instruction on blockchain fundamentals, smart contract development, and the architectural principles of decentralized applications. The resource covers technical domains including smart contract security auditing, network administration, and web3 programming. It details the implementation of token standards, the use of mnemonic seeds for wallet integration, and the creation of censorship-resistant application architectures. The documentation extends to system-level opera

Vulnerable-by-design solidity protocol to help Web3 security enthusiasts practice their skills in an environment closer to real live.

A collection of smart contract vulnerabilities along with prevention methods

A basic introduction to web3 and its concepts, using the JavaScript you already know.

PyTest plugin for testing smart contracts for Ethereum blockchain.

Damn Vulnerable DeFi - Foundry Version

Here we collect and discuss the best DeFI & Blockchain researches and tools - contributions are welcome.

A curated list of blockchain security Capture the Flag (CTF) competitions

Docker solc-select mpwn Python 3

Visualize Solidity control flow for smart contract security analysis. :dollar: ⇆ :dollar:

Opinionated security and code quality standard for Solidity smart contracts.

Smart Contract Security Verification Standard

Comprehensive list of known attack vectors and common anti-patterns

SmartCheck is an extensible static analysis tool for discovering vulnerabilities and other code issues in Ethereum smart contracts written in the Solidity programming language.

To learn common smart contract vulnerabilities using Foundry!

the magic X-ray machine for solidity smart contracts

Re-entrancy attack patterns from our paper "Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks"

2023 SOTA on evading detection, for blockchain malware.