Code Monkey home page Code Monkey logo

ethereum-smart-contract-vulnerability's Introduction

Ethereum-Smart-Contract-Vulnerability

Research around Ethereum smart contract vulnerabilities (Detection/Secure Code Generation)

[!] All pdf are available :)

Let's take a look on Ethereum :}

Oyente ๐Ÿ‘ˆ Making Smart Contracts Smarter
ref:https://dl.acm.org/doi/abs/10.1145/2976749.2978309

EthIR ๐Ÿ‘ˆ A Framework for High-Level Analysis of Ethereum Bytecode
ref:https://link.springer.com/chapter/10.1007/978-3-030-01090-4_30

Zeus ๐Ÿ‘ˆ Analyzing Safety of Smart Contracts
ref:http://pages.cpsc.ucalgary.ca/~joel.reardon/blockchain/readings/ndss2018_09-1_Kalra_paper.pdf

SmartCheck ๐Ÿ‘ˆ Static Analysis of Ethereum Smart Contracts
ref:https://dl.acm.org/doi/abs/10.1145/3194113.3194115

Slither ๐Ÿ‘ˆ A Static Analysis Framework For Smart Contracts
ref:https://dl.acm.org/doi/abs/10.1109/WETSEB.2019.00008

ReGuard ๐Ÿ‘ˆ Finding Reentrancy Bugs in Smart Contracts
ref:https://dl.acm.org/doi/abs/10.1145/3183440.3183495

Manticore ๐Ÿ‘ˆ A User-Friendly Symbolic Execution Framework for Binaries and Smart Contracts
ref:https://dl.acm.org/doi/abs/10.1109/ASE.2019.00133

MuSC ๐Ÿ‘ˆ A Tool for Mutation Testing of Ethereum Smart Contract
ref:https://dl.acm.org/doi/abs/10.1109/ASE.2019.00136

Securify ๐Ÿ‘ˆ Practical Security Analysis of Smart Contracts
ref:https://dl.acm.org/doi/abs/10.1145/3243734.3243780

Mythril ๐Ÿ‘ˆ Smashing Ethereum Smart Contracts for Fun and Real Profit
ref:https://github.com/b-mueller/smashing-smart-contracts

SolAnalyser ๐Ÿ‘ˆ A Framework for Analysing and Testing Smart Contracts
ref:https://www.research.ed.ac.uk/en/publications/solanalyser-a-framework-for-analysing-and-testing-smart-contracts

Echidna ๐Ÿ‘ˆ effective, usable, and fast fuzzing for smart contracts
ref:https://dl.acm.org/doi/abs/10.1145/3395363.3404366

Artemis ๐Ÿ‘ˆ An Improved Smart Contract Verification Tool for Vulnerability Detection
ref:https://scholars.cityu.edu.hk/en/publications/publication(540f6e82-4908-4408-beef-521a653bcb2f).html

Vandal ๐Ÿ‘ˆ A Scalable Security Analysis Framework for Smart Contracts
ref:https://ui.adsabs.harvard.edu/abs/2018arXiv180903981B/abstract

NeuCheck ๐Ÿ‘ˆ A more practical Ethereum smart contract security analysis tool
ref:https://onlinelibrary.wiley.com/doi/abs/10.1002/spe.2745

sFuzz ๐Ÿ‘ˆ An Efficient Adaptive Fuzzer for Solidity Smart Contracts
ref:https://dl.acm.org/doi/abs/10.1145/3377811.3380334

echidna-parade ๐Ÿ‘ˆ a tool for diverse multicore smart contract fuzzing
ref:https://dl.acm.org/doi/abs/10.1145/3460319.3469076

Smartian ๐Ÿ‘ˆ Enhancing Smart Contract Fuzzing with Static and Dynamic Data-Flow Analyses
ref:https://softsec.kaist.ac.kr/~jschoi/data/ase2021.pdf

Defectchecker ๐Ÿ‘ˆ Automated Smart Contract Defect Detection by Analyzing EVM Bytecode
ref:https://ieeexplore.ieee.org/abstract/document/9337195/

TokenHook ๐Ÿ‘ˆ Secure ERC-20 smart contract
ref:https://ui.adsabs.harvard.edu/abs/2021arXiv210702997R/abstract

SmartInspect ๐Ÿ‘ˆ Solidity Smart Contract Inspector
ref:https://www.computer.org/csdl/proceedings-article/iwbose/2018/08327566/12OmNwpGgGD

Porosity ๐Ÿ‘ˆ A Decompiler For Blockchain-Based Smart Contracts Bytecode
ref:https://infocon.org/cons/DEF%20CON/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEF%20CON%2025%20-%20Matt-Suiche-Porosity-Decompiling-Ethereum-Smart-Contracts-WP.pdf

MadMax ๐Ÿ‘ˆ surviving out-of-gas conditions in Ethereum smart contracts
ref:https://dl.acm.org/doi/abs/10.1145/3276486

Reentrancy vulnerability identification ๐Ÿ‘ˆ Reentrancy Vulnerability Identification in Ethereum Smart Contracts
ref:https://www.computer.org/csdl/proceedings-article/iwbose/2020/09050260/1iES4PuwIs8

SmartAnvil ๐Ÿ‘ˆ Open-Source Tool Suite for Smart Contract Analysis
ref:https://hal.inria.fr/hal-01940287/file/Duca18a-BookChapter-SmartAnvil.pdf

Ethploit ๐Ÿ‘ˆ From Fuzzing to Efficient Exploit Generation against Smart Contracts
ref:https://www.computer.org/csdl/proceedings-article/saner/2020/09054822/1iHVa68uXy8

Ethainter ๐Ÿ‘ˆ A Smart Contract Security Analyzer for Composite Vulnerabilities
ref:https://dl.acm.org/doi/abs/10.1145/3385412.3385990

VeriSolid ๐Ÿ‘ˆ Correct-by-Design Smart Contracts for Ethereum
ref:https://aronlaszka.com/papers/mavridou2019verisolid.pdf

Secure Code Generation for Ethereum :}

FSolidM ๐Ÿ‘ˆ Tool Demonstration: FSolidM for Designing Secure Ethereum Smart Contracts
ref:https://www.aronlaszka.com/papers/mavridou2018tool.pdf

Quartz ๐Ÿ‘ˆ A Framework for Engineering Secure Smart Contracts
ref:https://www2.eecs.berkeley.edu/Pubs/TechRpts/2020/EECS-2020-178.pdf

secure smart contract generation ๐Ÿ‘ˆ Secure smart contract generation based on petri nets
ref:https://link.springer.com/chapter/10.1007/978-981-15-1137-0_4

iContractML ๐Ÿ‘ˆ A Domain-Specific Language for Modeling and Deploying Smart Contracts onto Multiple Blockchain Platforms
ref:https://dl.acm.org/doi/abs/10.1145/3419804.3421454

ICML ๐Ÿ‘ˆ Domain Specific Language for Smart Contract Development
ref:https://ieeexplore.ieee.org/abstract/document/9169399/

Building Executable Secure Design Models ๐Ÿ‘ˆ Building Executable Secure Design Models for Smart Contracts with Formal Methods
ref:https://ui.adsabs.harvard.edu/abs/2019arXiv191204051X/abstract

Greate sites for learning more (advance topic) :}

๐ŸŽ‚ vulnerability blog https://blog.sigmaprime.io/
๐ŸŽ‚ Smart contract weakness classification https://swcregistry.io/
๐ŸŽ‚ Nicola Atzei Thesis https://iris.unica.it/retrieve/handle/11584/261568/331756/main.pdf
๐ŸŽ‚ watch vulnerable contract onchain https://contract-library.com/
๐ŸŽ‚ Decentralized Application Security Project https://www.dasp.co/#item-1
๐ŸŽ‚ Solidity Hacks https://solidity-by-example.org/hacks/

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.