{"id":6474,"url":"https://github.com/nongiach/awesome-cryptocurrency-security","name":"awesome-cryptocurrency-security","description":"😎 Curated list about cryptocurrency security (reverse / exploit / fuzz..)","projects_count":50,"last_synced_at":"2026-10-10T10:00:21.496Z","repository":{"id":44454358,"uuid":"126961867","full_name":"nongiach/awesome-cryptocurrency-security","owner":"nongiach","description":"😎 Curated list about cryptocurrency security (reverse / exploit / fuzz..)","archived":false,"fork":false,"pushed_at":"2020-01-12T02:19:27.000Z","size":31,"stargazers_count":198,"open_issues_count":5,"forks_count":47,"subscribers_count":9,"default_branch":"master","last_synced_at":"2026-09-20T18:29:30.418Z","etag":null,"topics":["bitcoin","blockchain","cryptocurrency","ethereum","exploit","fuzzing","reverse-engineering","security","solidity"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nongiach.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2018-03-27T09:24:47.000Z","updated_at":"2026-07-24T21:28:34.000Z","dependencies_parsed_at":"2022-08-30T02:30:27.428Z","dependency_job_id":null,"html_url":"https://github.com/nongiach/awesome-cryptocurrency-security","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/nongiach/awesome-cryptocurrency-security","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nongiach%2Fawesome-cryptocurrency-security","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nongiach%2Fawesome-cryptocurrency-security/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nongiach%2Fawesome-cryptocurrency-security/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nongiach%2Fawesome-cryptocurrency-security/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nongiach","download_url":"https://codeload.github.com/nongiach/awesome-cryptocurrency-security/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nongiach%2Fawesome-cryptocurrency-security/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343680568,"owners_count":38157178,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-10T02:00:07.419Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"created_at":"2024-01-07T06:18:50.309Z","updated_at":"2026-10-10T10:00:21.496Z","primary_language":null,"list_of_lists":false,"displayable":true,"categories":["Blogs","Paper","Tools","Training","MISC","Jobs","Awesomes"],"sub_categories":[],"readme":"# Awesome cryptocurrency security\n😎 Curated list about cryptocurrency security. (reverse, exploit, fuzz..)\n\n![alt text](https://blog.ret2.io/assets/img/evm_bytecode.png)\n\n[Image from this Practical ETH decompilation blog](https://blog.ret2.io/2018/05/16/practical-eth-decompilation/) .\n\n## Tools\n\n[Porosity](https://github.com/comaeio/porosity) - Decompiler and Security Analysis tool for Blockchain-based Ethereum Smart-Contracts.\n\n[Mythril](https://github.com/ConsenSys/mythril) - Security analysis tool for Ethereum smart contracts.\n\n[MAIAN](https://github.com/MAIAN-tool/MAIAN) - Automatic tool for finding trace vulnerabilities in Ethereum smart contracts.\n\n[Echidna](https://github.com/trailofbits/echidna) - Ethereum fuzz testing framework.\n\n[Manticore](https://github.com/trailofbits/manticore) - Manticore uses symbolic execution to simulate complex multi-contract and multi-transaction attacks against EVM bytecode.\n\n[Ethersplay](https://github.com/trailofbits/ethersplay) - A graphical EVM disassembler with advanced features. (Binja)\n\n[Oyente](https://github.com/melonproject/oyente) - An automatic EVM code analyzer based on symbolic execution and Z3 SMT solver.\n\n[IDA-EVM](https://github.com/trailofbits/ida-evm) - IDA Processor Module for the Ethereum Virtual Machine.\n\n[Evmdis](https://github.com/arachnid/evmdis) - EVM disassembler.\n\n[Securify](https://securify.ch/) - Formal Verification of Ethereum Smart Contracts.\n\n[Rattle](https://trailofbits.wufoo.com/forms/m1qfujq31qyj9ee/) - Rattle is an EVM static analyzer that analyzes the EVM bytecode directly for vulnerabilities.\n\n[Slither](https://github.com/trailofbits/slither) - Static analysis on Solidity.\n\n[Diligence](https://consensys.net/diligence/) - Security Services, Tools and Best Practices for the Ethereum Ecosystem.\n\n[fuildai](https://fluidai.co/) - Fluid is an AI that can automatically find and fix fatal security vulnerabilities in Smart Contracts.\n\n[vs code](https://diligence.consensys.net/blog/2019/10/solidity-visual-auditor-extension-for-vs-code/) - Solidity Visual Auditor Extension for VS Code\n\n## Blogs\n\n[muellerberndt](https://medium.com/@muellerberndt/practical-smart-contract-security-analysis-and-exploitation-part-1-6c2f2320b0c) - Practical Smart Contract Security Analysis and Exploitation— Part 1\n\n[blackhat](https://cansecwest.com/slides/2018/Blackhat%20Ethereum%20%20Ryan%20Stortz%20and%20Jay%20Little,%20Trail%20of%20Bits,%20Inc.pdf) - Blackhat Ethereum.\n\n[solidified](https://medium.com/solidified/parity-hack-how-it-happened-and-its-aftermath-9bffb2105c0) - Parity hack.\n\n[arvanaghi 1](https://arvanaghi.com/blog/reversing-ethereum-smart-contracts/) - Reversing ethereum smart contracts.\n\n[arvanaghi 2](https://arvanaghi.com/blog/reversing-ethereum-smart-contracts-pt2/) - Reversing ethereum smart contracts 2.\n\n[ret2](https://blog.ret2.io/2018/05/16/practical-eth-decompilation/) - Practical ETH decompilation.\n\n[loom-network](https://medium.com/loom-network/how-to-secure-your-smart-contracts-6-solidity-vulnerabilities-and-how-to-avoid-them-part-1-c33048d4d17d) - 6 vulnerabilities and how to avoid them part 1.\n\n[ETH assembly](https://medium.com/@xJonathan/reverse-engineering-ethereum-smart-contract-lets-talk-assembly-10c38b8e3c2) - Lets talk assembly.\n\n[radare2](https://blog.positive.com/reversing-evm-bytecode-with-radare2-ab77247e5e53) - Reversing EVM bytecode with radare2.\n\n[Etherum security tools](https://blog.trailofbits.com/2018/03/23/use-our-suite-of-ethereum-security-tools/) - Trailofbits Ethereum security tools.\n\n[Hackernoon](https://hackernoon.com/scanning-ethereum-smart-contracts-for-vulnerabilities-b5caefd995df) - Analyzing Ethereum smart contracts for vulnerabilities.\n\n[nccgroup](https://www.nccgroup.trust/us/our-research/discovering-smart-contract-vulnerabilities-with-goatcasino/?style=Cyber+Security) - Discovering Smart Contract Vulnerabilities with GOATCasino.\n\n[Arseny Reutov](https://blog.positive.com/predicting-random-numbers-in-ethereum-smart-contracts-e5358c6b8620) - Predicting Random Numbers in Ethereum Smart Contracts.\n\n[funfair](https://funfair.io/randomness-is-a-big-deal/) - Randomness is a big deal.\n\n## Training\n\n[Ethernaut](https://ethernaut.zeppelin.solutions/level/0x6545df87f57d21cb096a0bfcc53a70464d062512) - The ethernaut is a Web3/Solidity based wargame.\n\n[GOATCasino](https://github.com/nccgroup/GOATCasino) - GOATCasino is a Truffle project which deploys a set of intentionally vulnerable smart contracts.\n\n[ctf challs](https://eth.swampctf.com/) SWAMPCTF\n\n## MISC\n\n[dasp](http://dasp.co/) - Decentralized Application Security Project (or DASP) Top 10 of 2018.\n\n[Not so smart conracts](https://github.com/trailofbits/not-so-smart-contracts) - Examples of Solidity security issues.\n\n[EVM opcodes](https://github.com/trailofbits/evm-opcodes) - Ethereum opcodes and instruction reference.\n\n[mint integer overflow](https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md) mint integer overflow.\n\n[Uninitialized Pointer](https://medium.com/cryptronics/storage-allocation-exploits-in-ethereum-smart-contracts-16c2aa312743) Storage Allocation Exploits in Ethereum Smart Contracts.\n\n## Paper\n\n[Smarter](https://eprint.iacr.org/2016/633.pdf) - Making Smart Contracts Smarter.\n\n[Yellow Paper](https://ethereum.github.io/yellowpaper/paper.pdf) - Ethereum: a secure decentralised generalised transaction ledger. \n\n## Awesomes\n\n[awesome](https://github.com/sindresorhus/awesome)\n\n[awesome ethereum](https://github.com/btomashvili/awesome-ethereum)\n\n[awesome ethereum virtual  machine](https://github.com/pirapira/awesome-ethereum-virtual-machine)\n\n## Jobs\n\n[Ethercasts](https://jobs.ethercasts.com/)\n\n[Solidified](https://solidified.io/)\n\n[codementor](https://www.codementor.io/solidity-developers)\n\n[iosiro](https://www.iosiro.com/)\n\n[audithor](https://audithor.io)\n\n## Twitter\n\n[@withzombies](https://twitter.com/withzombies)\n[@chaignc](https://twitter.com/chaignc)\n[@trailofbits](https://twitter.com/trailofbits)\n\n----\nBy [@chaignc][] [#HexpressoTeam][hexpresso].\n\n\n[hexpresso]:     https://hexpresso.github.io\n[@chaignc]:    https://twitter.com/chaignc\n","projects_url":"https://awesome.ecosyste.ms/api/v1/lists/nongiach%2Fawesome-cryptocurrency-security/projects"}