awesome-cryptocurrency-security
😎 Curated list about cryptocurrency security (reverse / exploit / fuzz..)
https://github.com/nongiach/awesome-cryptocurrency-security
Last synced: 22 days ago
JSON representation
Awesomes
Blogs
- blackhat - Blackhat Ethereum.
- solidified - Parity hack.
- arvanaghi 1 - Reversing ethereum smart contracts.
- arvanaghi 2 - Reversing ethereum smart contracts 2.
- ret2 - Practical ETH decompilation.
- loom-network - 6 vulnerabilities and how to avoid them part 1.
- ETH assembly - Lets talk assembly.
- Etherum security tools - Trailofbits Ethereum security tools.
- Hackernoon - Analyzing Ethereum smart contracts for vulnerabilities.
- nccgroup - Discovering Smart Contract Vulnerabilities with GOATCasino.
- radare2 - Reversing EVM bytecode with radare2.
- Arseny Reutov - Predicting Random Numbers in Ethereum Smart Contracts.
- muellerberndt - Practical Smart Contract Security Analysis and Exploitation— Part 1
Jobs
MISC
- mint integer overflow
- Uninitialized Pointer
- dasp - Decentralized Application Security Project (or DASP) Top 10 of 2018.
- Not so smart conracts - Examples of Solidity security issues.
- EVM opcodes - Ethereum opcodes and instruction reference.
Paper
- Smarter - Making Smart Contracts Smarter.
- Yellow Paper - Ethereum: a secure decentralised generalised transaction ledger.
Tools
- Securify - Formal Verification of Ethereum Smart Contracts.
- fuildai - Fluid is an AI that can automatically find and fix fatal security vulnerabilities in Smart Contracts.
- Mythril - Security analysis tool for Ethereum smart contracts.
- Manticore - Manticore uses symbolic execution to simulate complex multi-contract and multi-transaction attacks against EVM bytecode.
- Evmdis - EVM disassembler.
- Diligence - Security Services, Tools and Best Practices for the Ethereum Ecosystem.
- Porosity - Decompiler and Security Analysis tool for Blockchain-based Ethereum Smart-Contracts.
- Echidna - Ethereum fuzz testing framework.
- Ethersplay - A graphical EVM disassembler with advanced features. (Binja)
- Oyente - An automatic EVM code analyzer based on symbolic execution and Z3 SMT solver.
- vs code - Solidity Visual Auditor Extension for VS Code
- IDA-EVM - IDA Processor Module for the Ethereum Virtual Machine.
- MAIAN - Automatic tool for finding trace vulnerabilities in Ethereum smart contracts.
Training
- Ethernaut - The ethernaut is a Web3/Solidity based wargame.
- ctf challs
- GOATCasino - GOATCasino is a Truffle project which deploys a set of intentionally vulnerable smart contracts.