PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How to use MythX for smart contract auditing

hackenproof.com | blog | #web3 | #security-tools | #static-analysis | #ethereum | #symbolic-execution | #smart-contract-audit | #mythx
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A hands-on guide to MythX, an automated EVM smart contract scanner combining static analysis, dynamic analysis and symbolic execution, from CLI setup and API keys to deep-scan reports.
Published
Collected

Related coverage

blog · hackenproof.com
How to use Slither for auditing smart contracts
A hands-on guide to Slither, the Python-based Solidity static analysis framework: installing via pip or Docker, pointing it at a contract, project or mainnet address, and reading its findings.
tool · hackenproof.com
How to install and use Foundry toolkit for smart contract auditing
A step-by-step guide to Foundry, the Rust-based Ethereum toolkit: install via foundryup, scaffold a project with forge init, then test and deploy a contract on a local anvil node.
blog · hackenproof.com
How to become a web3 bug bounty hunter
A learning path for aspiring Web3 bug hunters: build coding basics with JavaScript, learn Ethereum and Solidity, then practice on smart contract CTFs and DeFi protocol code.
blog · blog.trailofbits.com
Videos from Ethereum-focused Empire Hacking
Videos from the December 2017 Empire Hacking meetup—150+ attendees—cover smart contract security history, Ethereum CTF techniques, and symbolic execution of EVM bytecode with Manticore.
blog · certik.com
Clear Signing Under the Hood: A Technical Guide to ERC-7730
What the ERC-7730 standard does, how it works under the hood, and the security trade-offs that come with it.
blog · hackenproof.com
Aptos Move Smart Contract Security: How Object Refs Leak and Global Storage Breaks
Unchecked borrow_global_mut, leaked object refs, and Block-STM races break Aptos protocols. See the $25.5M Thala exploit and an Aptos/Supra audit checklist.
Back