/awesome-ethereum-security

A curated list of awesome Ethereum security references. Updated and maintained by Sleepy.

Creative Commons Attribution 4.0 InternationalCC-BY-4.0

Awesome Ethereum Security PRs Welcome

A curated list of awesome Ethereum security references, guidance, tools, and more.

Join Trail of Bits for a free Ethereum Office Hours session by reserving a slot on Calendly. An engineer from Trail of Bits will assist you in applying advanced security (tools)[#tools] and practices to your smart contract code.

Contents

Learning

Security references

Insecurity references

Capture the Flag and Wargames

It is recommended to finish these in order. Capture the Ether and Ethernaut can be swapped out for either.

Writeups

Coordinated disclosure

Blogs

  • Hacking Distributed - Emin Gün Sirer, professor in Cornell Tech’s IC3 lab focused on blockchain security.
  • Phil Does Security - Phil Daian, grad student behind KEVM, Hydra, and other Ethereum academic projects
  • Trail of Bits - Cybersecurity R&D firm with a blockchain security practice
  • ConsenSys - Blockchain software technology company with a well respected blockchain security team
  • Immunefi - DeFi bug bounty platform. Release post-mortems/write ups of critical vulns and guides
  • Secureum - Initiative to educate smart contract security auditors. Releases publications on audit techniques and best practices
  • Martin Holst Swende - Martin Swende, programmer and appsec consultant
  • SmartDec blog - Company blog about security issues and practices within blockchain ecosystem

Notable blog posts

Conference talks

Title Conference Year
Predicting Random Numbers in Ethereum Smart Contracts OWASP AppSec 2018
Blockchain Autopsies - Analyzing Smart Contract Deaths Blackhat USA 2018
Rattle - an EVM binary analysis framework reCON 2018
Blackhat Ethereum CanSecWest 2018
Smashing Ethereum Smart Contracts for Fun and Profit HITB Amsterdam 2018
Automatic Bug Finding for the Blockchain EkoParty 2017

Podcasts and Episodes

Podcasts

Episodes

Tools

Visualization

  • ethereum-graph-debugger - A graphical EVM debugger. Displays the entire program control flow graph.
  • Slither - Slither can map method visibility and modifiers, state variables that are read and written, calls, and can print the inheritance graph of a smart contract
  • Solgraph - Generates DOT graphs with function control flow of a solidity contract
  • Surya - Generates various visual outputs of function call graphs
  • sol-function-profiler - Solidity contract function profiler

Linters

  • Remix - Browser-based Solidity IDE with linting features
  • SmarrtCheck - A linter for Solidity and Vyper that checks code for security issues and bad practices.
  • Solhint - Linter for both security and style-guide validations. It strictly adheres to the Solidity Style Guide.
  • Solium - Linter for both security and style-guide validations. Does not strictly adhere to the Solidity Style Guide.

Bug finding tools

  • Echidna - Fuzzer for Ethereum smart contracts. Uses property testing to generate malicious inputs that break smart contracts.
  • Manticore - Symbolic execution tool for Ethereum smart contracts that includes detectors for common security flaws
  • Mythril OSS - Open-source security analysis tool for Ethereum smart contracts built around detector modules
  • Securify - Static analysis tool from ChainSecurity
  • Slither - Static analysis framework, written in Python, with detectors for many common Solidity issues

Verification tools

  • KEVM - K Semantics of the Ethereum Virtual Machine (EVM)
  • Manticore - Symbolic execution tool for EVM

Reversing tools

  • abi-decompiler - EVM reverse engineering helper utility
  • ethereum-dasm - EVM disassembler with static and dynamic analysis abilities, including function signature lookup
  • Ethersplay - Visual disassembler for EVM bytecode built on Binary Ninja
  • evmlab - Utilities for interacting with the Ethereum virtual machine
  • IDA-EVM - IDA plugin to view EVM instructions
  • Panoramix
  • pyevmasm - EVM assembler and disassembler with a CLI and a Python API
  • Rattle - EVM binary static analysis framework. Produces SSA representations of EVM code.

Custody

  • Subzero - Subzero is an HSM-backed method for cold storage of Bitcoin developed by Square

Communities

  • Enterprise Ethereum Alliance Security Task Force
  • Empire Hacking Slack #ethereum
  • SkidsDAO discord - DAO founded by Sleepy to onboard and train web3 hackers whilst funding projects pushing Ethereum innovation via an inbuilt charity staking system. Facilitates open, accountable audits with exploit insurance and bug bounties through it's decentralized protocol, Fides.
  • Secureum discord - Founded by 0xRajeev(former Trail of Bits security researcher) to educate the Ethereum ecosystem on smart contract auditing and security. Holds monthly RACE and CARE programmes free of charge for aspiring auditors with NFTs as proof of participation and on-chain rep.
  • Spearbit discord - DAO founded by freelance blockchain security researchers to provide an avenue for auditors to perform freelance work without worrying about legality issues.
  • Immunefi discord - Community discord for the Immunefi DeFi bug bounty platform. Hacker meetups are occasionally held. At the time of this writing, samczsun and the Ethernaut have been featured guests.

Other Awesome Lists

Contributing

We welcome contributions that help curate this awesome list. Please refer to the contributing guidelines when submitting PRs. Thanks!