awesome-repositories.com
博客
MCP
awesome-repositories.com

通过 AI 驱动的搜索,发现最优秀的开源仓库。

探索精选搜索开源替代品自托管软件博客网站地图
项目MCP 服务器关于排名机制媒体报道
法律隐私政策服务条款
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·

10 个仓库

Awesome GitHub RepositoriesSmart Contract Analysis

Security and style analysis tools for blockchain smart contracts.

Explore 10 awesome GitHub repositories matching part of an awesome list · Smart Contract Analysis. Refine with filters or upvote what's useful.

Awesome Smart Contract Analysis GitHub Repositories

用 AI 发现最棒的仓库。我们将通过 AI 为您搜索最匹配的仓库。
  • smartcontractkit/chainlinksmartcontractkit 的头像

    smartcontractkit/chainlink

    8,222在 GitHub 上查看↗

    Chainlink is a decentralized oracle network that connects smart contracts to off-chain data, computation, and real-world systems. It provides a secure and reliable infrastructure for blockchain applications to access external information, execute automated workflows, and interact with other blockchains. The network is secured by a staking-based model where node operators lock LINK tokens as collateral, which can be slashed for poor performance, incentivizing honest and accurate data delivery. The platform distinguishes itself through a comprehensive set of capabilities that extend beyond basi

    Includes a marketplace example that lets sellers withdraw accumulated sales proceeds.

    Goblockchainchainlinkethereum
    在 GitHub 上查看↗8,222
  • trailofbits/slithertrailofbits 的头像

    trailofbits/slither

    6,299在 GitHub 上查看↗

    Static Analyzer for Solidity and Vyper

    Resolves contract inheritance hierarchies to track function overrides and interface implementations.

    Python
    在 GitHub 上查看↗6,299
  • crytic/slithercrytic 的头像

    crytic/slither

    6,141在 GitHub 上查看↗

    Loads Solidity and Vyper source files into an internal representation for subsequent static analysis.

    Pythonethereumsoliditystatic-analysis
    在 GitHub 上查看↗6,141
  • astrada/google-drive-ocamlfuseastrada 的头像

    astrada/google-drive-ocamlfuse

    5,944在 GitHub 上查看↗

    google-drive-ocamlfuse is a FUSE-based filesystem that mounts a Google Drive account as a local directory, enabling standard file operations on cloud files. It bridges POSIX filesystem calls to the Google Drive API, allowing users to read, write, and manage files through their operating system's native file manager or command line. The project distinguishes itself through support for multiple simultaneous Google Drive accounts, each mounted as an independent local directory with separate authentication and cache state. It handles Google Docs, Sheets, and Slides by exporting them as read-only

    Resolves filename collisions on the remote drive with configurable strategies for unique local filenames.

    OCamlfilesystemfusegoogle-drive
    在 GitHub 上查看↗5,944
  • genlayerlabs/genlayer-project-boilerplategenlayerlabs 的头像

    genlayerlabs/genlayer-project-boilerplate

    4,829在 GitHub 上查看↗

    This is a full-stack template for building decentralized applications on the GenLayer blockchain, combining smart contract development with a frontend integration pipeline. It provides a pre-configured environment for writing GenLayer smart contracts using Python decorators that specify function visibility, persistence, and typed storage structures, along with built-in linting to catch forbidden imports and nondeterministic calls before deployment. The boilerplate distinguishes itself by supporting nondeterministic smart contract operations—such as querying language models and fetching extern

    Includes built-in linting that catches forbidden imports and nondeterministic calls before deployment.

    TypeScript
    在 GitHub 上查看↗4,829
  • consensys/mythrilConsenSys 的头像

    ConsenSys/mythril

    4,251在 GitHub 上查看↗

    Mythril 是一个以太坊虚拟机 (EVM) 智能合约安全分析器,使用符号执行在部署前识别字节码中的漏洞。它作为一个漏洞扫描器和形式化审计工具,将程序输入视为数学符号,以证明合约逻辑中存在漏洞。 该工具执行字节码级分析,以检测可能被高级编译器隐藏的缺陷。它集成了 SMT 求解器来确定特定漏洞状态是否可达,并将符号执行跟踪与已知安全缺陷签名库进行比较。 该项目涵盖了广泛的安全分析功能,包括区块链漏洞检测、合约逻辑的形式化审计以及自动化安全测试。它还提供 Git 工作流集成,以在提交过程中验证代码。

    Symbolic execution framework for finding vulnerabilities in smart contracts.

    Python
    在 GitHub 上查看↗4,251
  • trailofbits/manticoretrailofbits 的头像

    trailofbits/manticore

    3,855在 GitHub 上查看↗

    Manticore is a symbolic execution engine designed for the analysis of binary executables and smart contracts. It functions as an automated vulnerability scanner and verification platform that systematically traverses program execution paths to identify security flaws, validate business invariants, and ensure software properties hold true under all possible input conditions. The engine distinguishes itself through a unified instruction set abstraction that enables consistent analysis across diverse architectures and contract formats. It provides a programmatic interface for deep customization,

    Validates smart contract invariants by executing symbolic transactions to ensure business logic correctness under all possible inputs.

    Python
    在 GitHub 上查看↗3,855
  • kadenzipfel/smart-contract-vulnerabilitieskadenzipfel 的头像

    kadenzipfel/smart-contract-vulnerabilities

    2,466在 GitHub 上查看↗

    This project serves as a comprehensive knowledge base and technical reference for identifying and mitigating security vulnerabilities in smart contracts. It provides a structured catalog of common attack vectors, logic errors, and insecure coding patterns, offering developers and auditors a centralized resource for implementing secure decentralized applications. The repository distinguishes itself by covering the full lifecycle of contract security, from low-level arithmetic safety and compiler constraints to high-level architectural patterns. It details specific defensive strategies for mana

    Checks internal state consistency using formal invariant verification to prevent critical logic errors.

    blockchainethereumsecurity
    在 GitHub 上查看↗2,466
  • ctf-wiki/ctf-challengesctf-wiki 的头像

    ctf-wiki/ctf-challenges

    1,687在 GitHub 上查看↗

    This repository serves as a structured archive of cybersecurity training exercises designed for hands-on practice across multiple technical domains. It functions as a collection of intentionally vulnerable challenges that provide users with the source files and documentation necessary to develop proficiency in security analysis and software vulnerability research. The project distinguishes itself by organizing these exercises into a hierarchical directory structure, ensuring that security scenarios remain consistent and reproducible through version-controlled static assets. Each challenge is

    Enables hands-on research into common vulnerabilities found in smart contracts and decentralized applications.

    HTML
    在 GitHub 上查看↗1,687
  • secure-software-engineering/phasarsecure-software-engineering 的头像

    secure-software-engineering/phasar

    1,045在 GitHub 上查看↗

    Phasar is a static analysis framework designed for the inspection of software logic through the processing of compiler intermediate representations. It provides a modular pipeline for building program representations, including call graphs, control flow graphs, and type hierarchies, which serve as the foundation for deep structural analysis of software behavior. The framework specializes in interprocedural data flow analysis and pointer alias resolution, enabling the tracking of information movement across function boundaries and the identification of indirect memory access patterns. By lever

    Constructs call graphs, control flow graphs, and type hierarchies to support deep code analysis.

    C++ccppdata-flow-analysis
    在 GitHub 上查看↗1,045
  1. Home
  2. Part of an Awesome List
  3. Developer Tools
  4. Smart Contract Analysis

探索子标签

  • Abstract Contract Shadowing DetectorsIdentifies state variables shadowed from abstract contracts in Solidity codebases. **Distinct from Smart Contract Analysis:** Distinct from Smart Contract Analysis: focuses specifically on shadowing from abstract contracts, not general analysis.
  • Control Flow Analysis3 个子标签Constructs call graphs and control-flow graphs from smart contract bytecode to trace execution paths and identify unsafe code patterns. **Distinct from Smart Contract Analysis:** Distinct from Smart Contract Analysis: focuses specifically on control flow and call graph construction rather than general security analysis.
  • Custom Rule FrameworksAPIs and frameworks for writing and running user-defined static analysis checks on smart contracts. **Distinct from Smart Contract Analysis:** Distinct from Smart Contract Analysis: focuses on the extensibility API for custom rules, not the built-in analysis capabilities.
  • Destructible Contract DetectorsDetectors that identify logic contracts that can be destructed, enabling selfdestruct vulnerability detection. **Distinct from Smart Contract Analysis:** Distinct from Smart Contract Analysis: focuses specifically on detecting destructible logic contracts rather than general analysis.
  • Duplicate Name Detectors1 个子标签Detectors that identify codebases where two contracts share the same name, causing compilation artifacts to be missing. **Distinct from Smart Contract Analysis:** Distinct from Smart Contract Analysis: focuses specifically on detecting duplicate contract names rather than general analysis.
  • Inheritance Inspections1 个子标签Lists contracts not inherited by others to avoid duplicate findings across derived contracts. **Distinct from Smart Contract Analysis:** Distinct from Smart Contract Analysis: focuses specifically on inspecting contract inheritance hierarchies to prevent duplicate analysis results.
  • Invariant VerificationsChecks that user-specified properties written in Solidity hold for all possible contract executions using symbolic execution. **Distinct from Smart Contract Analysis:** Distinct from Smart Contract Analysis: focuses on formal verification of user-defined invariants via symbolic execution rather than general vulnerability scanning.
  • Source Code LoadersLoads Solidity or Vyper source files and builds internal representations of contracts, functions, and state variables. **Distinct from Smart Contract Analysis:** Distinct from Smart Contract Analysis: focuses on the initial loading and parsing of source code into an internal representation, not the subsequent analysis.
  • State Variable Shadowing Detectors2 个子标签Detects derived contracts that redeclare state variables from base contracts, breaking inherited modifiers and functions. **Distinct from Smart Contract Analysis:** Distinct from Smart Contract Analysis: focuses specifically on detecting state variable shadowing, not general security or style analysis.
  • Unprotected Chainlink VRF Request DetectorsIdentifies calls to _requestRandomness within an unprotected function. **Distinct from Smart Contract Analysis:** Distinct from general Smart Contract Analysis: focuses specifically on unprotected Chainlink VRF requests.
  • Unprotected Selfdestruct Detectors2 个子标签Detects calls to selfdestruct that lack access control. **Distinct from Smart Contract Analysis:** Distinct from general Smart Contract Analysis: focuses specifically on unprotected selfdestruct calls.