awesome-web3-security
A curated list of awesome Web3 Security.
https://github.com/fabionoth/awesome-web3-security
Last synced: 13 days ago
JSON representation
-
<a name="bugbounty"> BugBounty
-
<a name="others"> Other tools
- Hacken Proof - Expert web3 bug bounty and crowdsourced audit platform
- Immunefi - Web3's bug bounty platform
-
-
<a name="ctf"> CTF
-
<a name="others"> Other tools
- blocksec-ctfs - A curated list of blockchain security Wargames, Challenges, and Capture the Flag (CTF) competitions and solution writeups.
- Capture the Ether - the game of Ethereum smart contract security
- CryptoHack - A free, fun platform for learning modern cryptography
- ciphershastra - A place where you can enhance your Security Skills by solving and learning from CTF-like challenges.
- Damn Vulnerable DeFi - The training ground for security researchers, developers and educators to dive into smart contract security.
- The Ethernaut - The Ethernaut is a Web3/Solidity based wargame inspired by overthewire.org
-
-
<a name="databases"> Databases/Books and References
-
<a name="others"> Other tools
- Chainlist - Helping users connect to EVM powered networks
- REKT - Rekt News is a leading online platform offering timely and concise information on decentralized finance (DeFi), blockchain, and the cryptocurrency industry
- Smart Contract Security Chapter - Chapter 9 from Ethereum book.
-
-
<a name="playgrounds"> Playgrounds
-
<a name="others"> Other tools
- Remix Ethereum - No more words. Everybody knows Remix
- Rust Playground - The Rust Playground
- TON Network Playground - TON Network IDE
-
-
<a name="standards"> Standards
-
<a name="others"> Other tools
- OWASP Smart Contract - The OWASP Smart Contract Top 10 is a standard awareness document that intends to provide Web3 developers and security teams with insight into the top 10 vulnerabilities found in smart contracts.
-
-
<a name="tools"></a> Tools
-
<a name="forensics"> Forensics
- abi-decompiler - The purpose of abi-decompiler is to implement a simple tools to recover ABI of EVM smart contracts, including function names.
- DeDaub - The Dedaub decompiler takes Ethereum Virtual Machine (EVM) bytecode and produces more readable Solidity-like code.
- Panoramix - This is an EVM decompiler.
-
<a name="fuzzers"> Fuzzers
-
<a name="os"> OS
- ZIION - ZIION is the first open-source, end-to-end, pre-compiled, multi-architecture, multi-protocol blockchain security testing and development solution
-
<a name="others"> Other tools
- ETH-Toolbox - EthToolbox v1.1 is a set of useful tools for Ethereum developers.
- dethcode - View source of deployed Ethereum smart contracts in VS Code
- GetBlock - a Blockchain-as-a-Service (BaaS) platform that provides a fast and easy API connection to RPC full nodes for 50+ blockchains.
-
<a name="sast"> SAST/DAST/Unity Test Analysis
- Brownie - Brownie is a Python-based development and testing framework for smart contracts targeting the Ethereum Virtual Machine.
- Ethereum Security Box - This repository contains scripts to create a Docker container preinstalled and preconfigured with all of Trail of Bits’ Ethereum security tools.
- Foundry - Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.
- Hardhat - Hardhat is a development environment for Ethereum software
- Manticore - Manticore is a symbolic execution tool for the analysis of smart contracts and binaries.
- Mythril - Mythril is a security analysis tool for EVM bytecode
- Mythx - Create a MythX account, link your Ethereum address, and generate API keys
- Olympix - Scanning for vulnerabilities, or automating test generation.
- Octopus - Octopus is a security analysis framework for WebAssembly module and Blockchain Smart Contract.
- Security2 - Securify 2.0 is a security scanner for Ethereum smart contracts supported by the Ethereum Foundation and ChainSecurity.
- Slither - Slither is a Solidity & Vyper static analysis framework written in Python3
- Surya - Surya is an utility tool for smart contract systems. It provides a number of visual outputs and information about the contracts' structure.
- SmartCheck - SmartCheck is an extensible static analysis tool for discovering vulnerabilities and other code issues in Ethereum smart contracts written in the Solidity programming language.
- Truffle Suite - The most comprehensive suite of tools for smart contract development
-
<a name="testing"> Testing
- BSCheck - Free Binance Smart Chain token analyzer
- QuillCheck - Safeguard your web3 investments with our AI Agent. Uncover honeypots, understand token permissions, and get comprehensive market insights. Shield yourself from rugpulls and scam tokens. DYOR here!
- Rugscreen - Catches rugpulls before you lose money.
- TokenSniffer - Automated scam detection, auditing, and metrics
- Rug PUll Detector - Find the smart contract of the token and copy solidity code
- RektRadar - Real-time Ethereum scam detector with mempool monitoring, deployer graph analysis, and factory pattern detection. Catches rug pulls mid-broadcast, flags honeypots before liquidity is added.
- Sharpe Rug Check - Live token risk scanner for honeypot, liquidity, holder, ownership, and authority signals.
-
Programming Languages
Categories
Sub Categories
Keywords
ethereum
8
security
5
solidity
5
blockchain
4
smart-contracts
4
testing
3
vyper
2
static-analysis
2
program-analysis
2
security-analysis
2
evm
2
symbolic-execution
2
smart-contract
2
toolkit
1
tooling
1
tempo
1
rust
1
ir
1
fuzzing
1
framework
1
eth
1
dapp
1
compilers
1
compiler
1
bytecode
1
visual-studio-code
1
etherscan
1
webassembly
1
wasm
1
neo
1
evm-bytecode
1
eos
1
disassembler
1
control-flow-analysis
1
call-flow-analysis
1
vulnerability
1
datalog
1
fuzzer
1
z3
1
smt
1
python
1
emulation
1
binary-analysis
1
alloy
1