Skip to content

Commit

Permalink
Added Smart Contract Auditing Tools Section
Browse files Browse the repository at this point in the history
  • Loading branch information
moeinfatehi committed Oct 30, 2023
1 parent ffba025 commit dcc997d
Showing 1 changed file with 89 additions and 0 deletions.
89 changes: 89 additions & 0 deletions Technical_Resources/Smart_Contract_Auditing_Tools.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,89 @@
# 🛠️ Ultimate Guide to Smart Contract Auditing Tools 🛠️

## 📚 Table of Contents

- [🎯 Introduction](#-introduction)
- [🔍 Static Analysis Tools](#-static-analysis-tools)
- [🏃 Dynamic Analysis Tools](#-dynamic-analysis-tools)
- [🔗 Conclusion & Further Reading](#-conclusion--further-reading)
- [🙏 Want to Contribute?](#-want-to-contribute)

## 🎯 Introduction

Welcome to the ultimate guide for Smart Contract Auditing Tools! Whether you're a developer or a security analyst, this guide aims to provide you with a comprehensive list of tools for auditing smart contracts effectively.

## 🔍 Static Analysis Tools

### MythX
- **Platform**: Web, CLI
- **Overview**: Comprehensive smart contract security analysis.
- **Unique Feature**: Deep analysis using multiple techniques.
- **Who Should Use**: Developers looking for in-depth security analysis.
- **Score**: 9/10
- [Official Website](https://mythx.io/)

### Slither
- **Platform**: CLI
- **Overview**: A static analysis framework.
- **Unique Feature**: Detects vulnerabilities and code smells.
- **Who Should Use**: Developers who prefer CLI.
- **Score**: 8.5/10
- [GitHub Repo](https://github.com/crytic/slither)

### Securify
- **Platform**: Web
- **Overview**: Web-based comprehensive audits.
- **Unique Feature**: Formal verification methods.
- **Who Should Use**: Web interface enthusiasts.
- **Score**: 8/10
- [Official Website](https://securify.chainsecurity.com/)

### Solhint
- **Platform**: CLI
- **Overview**: Linter to identify code style and security issues.
- **Unique Feature**: Extensible via plugins.
- **Who Should Use**: Developers focused on code quality.
- **Score**: 7.5/10
- [GitHub Repo](https://github.com/protofire/solhint)

## 🏃 Dynamic Analysis Tools

### Manticore
- **Platform**: CLI
- **Overview**: Symbolic execution tool.
- **Unique Feature**: Deep analysis via symbolic execution.
- **Who Should Use**: Advanced users.
- **Score**: 8/10
- [GitHub Repo](https://github.com/trailofbits/manticore)

### Echidna
- **Platform**: CLI
- **Overview**: Property-based testing tool.
- **Unique Feature**: Automatic test case generation.
- **Who Should Use**: Developers looking for automated testing.
- **Score**: 7.5/10
- [GitHub Repo](https://github.com/crytic/echidna)

### Ganache
- **Platform**: Desktop, CLI
- **Overview**: Personal blockchain for testing.
- **Unique Feature**: Easy setup and GUI.
- **Who Should Use**: Those new to smart contract testing.
- **Score**: 7/10
- [Official Website](https://www.trufflesuite.com/ganache)

### Harvey
- **Platform**: CLI
- **Overview**: Greybox fuzzer for smart contracts.
- **Unique Feature**: Efficient fuzzing algorithms.
- **Who Should Use**: Security analysts.
- **Score**: 7/10
- [GitHub Repo](https://github.com/crytic/harvey)

## 🔗 Conclusion & Further Reading

This guide aims to be a one-stop-shop for all your smart contract auditing needs. Whether you prefer static or dynamic analysis, there's a tool here for you. Always remember, the security of your smart contract is paramount.

## 🙏 Want to Contribute?

Found a tool that you think should be here? Feel free to open a pull request or reach out to us.

0 comments on commit dcc997d

Please sign in to comment.