Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Hedera, Quorum, Vechain, Rootstock, Tron and other EVM-compatible blockchains.

Symbolic execution tool

Static Analyzer for Solidity and Vyper

Ethereum smart contract fuzzer

Smartian: Enhancing Smart Contract Fuzzing with Static and Dynamic Data-Flow Analyses (ASE '21)

我最近在重新学solidity，巩固一下细节，也写一个“WTF Solidity极简入门”，供小白们使用，每周更新1-3讲。Now supports English! 官网: https://wtf.academy

Reproduce DeFi hacked incidents using Foundry.

Modern, opinionated, and gas optimized building blocks for smart contract development.

Nyx: Detecting Exploitable Front-Running Vulnerabilities in Smart Contracts

Slither Detectors by Pessimistic.io

SupportMe

All ctf challs and scripts (and writeup, maybe) from 0ops.

Demystifying Exploitable Bugs in Smart Contracts

Here we discuss how one can investigate crypto hacks and security incidents, and collect all the possible tools and manuals! PRs are welcome! If any tool is missing - please open PR!

Publications from Trail of Bits

Academic Smart Contract Papers. Welcome developers or researchers to add more published papers to this list.

A guide to available tools and platforms for developing on Ethereum.

A guide to smart contract security best practices

记录安全方面的笔记/工具/漏洞合集

应急响应实战笔记，一个安全工程师的自我修养。

Study Notes For Web Hacking / Web安全学习笔记

收集的文章 https://mrwq.github.io/tools/paper/

基于 docsify 快速部署 Awesome-POC 中的漏洞文档

各大漏洞文库合集

一个2023届毕业生在毕业前持续更新、收集的安全岗面试题及面试经验分享~

HTTP parameter discovery suite.

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

Vyper contracts used in Curve.fi exchange pools.