mythril
Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Hedera, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains. (by ConsenSys)
smart-contract-best-practices
A guide to smart contract security best practices (by ConsenSys)
Our great sponsors
| mythril | smart-contract-best-practices | |
|---|---|---|
| 5 | 9 | |
| 2,374 | 5,580 | |
| 6.0% | 5.1% | |
| 8.7 | 8.3 | |
| 7 days ago | about 2 months ago | |
| Python | HTML | |
| MIT License | - |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
mythril
Posts with mentions or reviews of mythril.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-03-09.
-
Static analysis of smartcontracts?
There are some paid tools and some free ones. A few that come to mind are ConsenSys MythX (based in part on the open-source Mythril), ShiftLeft, Oyente, Octopus… maybe best to just check out ETHSecurity’s list.
-
Formal Verification Methods in industry
When you say "formal verification methods", what kind of techniques are you interested in? While using interactive theorem provers will most likely not become very widespread, there are plenty of tools that use formal techniques to give more correctness guarantees. These tools might give some guarantees, but do not guarantee complete functional correctness. WireGuard (VPN tunnel) is I think a very interesting application where they verified the protocol. There are also some tools in use, e.g. Mythril and CrossHair, that focus on detecting bugs using symbolic execution. There's also INFER from Facebook/Meta which tries to verify memory safety automatically. The following GitHub repo might also interest you, it lists some companies that use formal methods: practical-fm
-
Please check this if you are looking for a good tokenomics project.
- Audited by MythX.io
-
What kind of Ethereum node/API/setup do I need for these use cases?
ability to run security analysis on contracts using for .e.g. https://github.com/ConsenSys/mythril
smart-contract-best-practices
Posts with mentions or reviews of smart-contract-best-practices.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-03-30.
-
Setup for Success: Creating Web3 Projects with the Truffle for VS Code Extension
Security should always be a major priority when developing smart contracts. Millions of dollars are lost to hackers on what seems like a regular basis. As a Web3 developer, you need to continuously stay up to date on the latest security best practices.
-
My journey from Web Dev to Web 3.0 Dev - Part 1
Solidity basics and best practices
- Contract example with best practices?
-
RESOURCES I USED TO LEARN BLOCKCHAIN/SMART CONTRACT PROGRAMMING
Smart Contracts Best Practices
- Great resource for smart contact security
- Solidity Security Best Practices
-
What language to learn before Solidity?
A good read to get the general understanding : https://github.com/ConsenSys/smart-contract-best-practices/blob/master/docs/index.md
- Web3.0 Resources
-
Por onde começar em tecnologias blockchain ?
Tooling e best practices: https://github.com/ConsenSys/ethereum-developer-tools-list https://github.com/ConsenSys/smart-contract-best-practices
What are some alternatives?
When comparing mythril and smart-contract-best-practices you can also consider the following projects:
manticore - Symbolic execution tool
truffle - A tool for developing smart contracts. Crafted with the finest cacaos.
tatum-js - Tatum API client to access Tatum blockchain infrastructure
pyteal - Algorand Smart Contracts in Python
solc-select - Manage and switch between Solidity compiler versions
js-xss - Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
RideX - A Decentralized Riding System
audit-indexed-finance-2020-10
web3j - Lightweight Java and Android library for integration with Ethereum clients
concordium-rust-smart-contracts - Standard library for writing smart contracts for the Concordium blockchain.
solidity-template - Combines Hardhat, TypeChain, Ethers, Waffle, Solhint, Solcover and Prettier
public-cookbooks - The central repository of public Sensei cookbooks