Usalama na majaribio

Semgrep is a pattern-based static analysis tool with rulesets for Solidity vulnerabilities. Builders run those rules over a codebase to catch known vulnerable patterns and style issues before review.

heimdall-rs is a Rust EVM toolkit that disassembles bytecode, decompiles contracts, generates control flow graphs, and decodes calldata and traces. Builders reach for it when they need to understand a contract that has no published source.

sol2uml generates UML class and storage-layout diagrams from Solidity source or from verified contracts. Builders run it to see contract relationships and how state variables are packed into storage.

CodeTracer ni kitatuzi rafiki kwa mtumiaji cha kusafiri kwa wakati kilichoundwa kusaidia anuwai ya lugha za programu za Web3.

The Tenderly CLI is the command line client for Tenderly, pushing contracts for verification and driving error tracking, monitoring, and alerting. Builders install it to run those steps from a terminal or a continuous integration job.

EDB ni kitatuzi cha kiwango cha chanzo kwa utekelezaji wa Solidity na hatua, za ndani, saa, na vituo vya mapumziko unapohitaji mwonekano wa kiwango cha IDE katika tabia ya mkataba mnyororoni au katika majaribio.

EVMConnector is a browser workspace for calling contract functions on any EVM chain, with saved contracts and shareable call links. Builders use it to drive a contract without writing a script.

A calldata decoder that also unwraps nested function calls. Builders open it when a flat decoder leaves the inner calls of a batched or forwarded transaction unreadable.

SmartContractGUI turns an uploaded ABI into an interface for reading from and writing to that contract on any EVM chain. Builders use it when they have an ABI but no frontend.

Tenderly provides transaction simulation, trace debugging, alerting, and Virtual TestNets for contracts. Builders use it to replay a failing transaction, watch deployed contracts, and test against a forked network.

Web3Client is a browser tool for creating, testing, and sharing contract ABIs and the calls made against them. Builders use it to work out a call and hand the result to someone else.

revm-inspectors is a Rust crate of EVM execution hooks and tracing built on revm, and it powers call tracing in Reth and Foundry. Rust builders import it to build their own tracers and debuggers.

pyevmasm is a Python disassembler and assembler for EVM bytecode from Trail of Bits. Analysis scripts import it to turn bytecode into instructions and back.

Simbolik ni kitatuzi chenye nguvu cha Solidity kinachochanganya utatuzi wa jadi wa sehemu ya kukatiza na utekelezaji wa kiishara, kuwezesha wasanidi programu kuchunguza kila njia inayowezekana ya utekelezaji na kufichua udhaifu kwa usahihi. Inapatikana kama kiendelezi cha VSCode, Simbolik inaunganishwa bila mshono kwenye mtiririko wa kazi uliopo, ikitoa utatuzi wa mtindo wa sehemu ya kukatiza, ukaguzi wa kiwango cha Solidity na EVM, na uwezo wa uthibitishaji rasmi.

EVMole extracts function selectors, arguments, and control flow from raw EVM bytecode, including contracts with no verified source. Builders point it at an unknown contract to work out what its functions take.

Programu-jalizi ya Hardhat ambayo hutoa uchanganuzi wa matumizi ya gesi kwa vyumba vya majaribio vya mkataba mahiri. Ina usaidizi maalum kwa minyororo ya OPStack, ni tegemezi katika hazina za GitHub > 150k na inapakuliwa kutoka NPM > 100k kwa wiki.

Abi Ninja ni kiolesura cha mtumiaji (UI) cha kivinjari kwa ajili ya kuita mikataba yenye ABI zinazojulikana, ABI zilizobandikwa, au msimbo wa baiti uliotenganishwa, na usomaji unaotambua proksi kwenye mitandao mingi ikijumuisha nodi yako ya Hardhat au Anvil inayoendeshwa ndani ya nchi.

hardhat-tracer is a Hardhat plugin that prints internal calls, events, and storage operations for a transaction in the console. Hardhat users install it to see what actually happened inside a failing test transaction.

Radar, from Auditware, is a static analysis tool that covers Solidity as well as Rust, Anchor, and Stylus contracts. Auditors run it to get findings across a mixed contract codebase.

geas, the Good Ethereum Assembler, is an assembler for writing raw EVM bytecode by hand, maintained by a go-ethereum core developer. It is used for EIP test cases and other low-level contract work.

evm-storage turns a transaction hash into readable state diffs and can list a contract's full storage. Builders install the command line tool when they need to see exactly which storage slots a call changed.

Loop Decoder ni maktaba ya TypeScript yenye utegemezi mdogo wa nje ambayo hubadilisha data za mnyororo wa vitalu kuwa muundo unaosomeka na binadamu.

scopelint is an opinionated formatter and linter for Foundry Solidity projects. Builders install it to hold a codebase to the ScopeLift conventions.

Kitatuzi na kiigaji cha muamala kinachotegemea wavuti kwa EVM. Chanzo wazi na kinachoweza kupangishwa kibinafsi. Kagua hali za kigezo katika kila hatua, iga miamala kabla ya kusambaza, na uweke wasifu wa matumizi ya gesi. Inasaidia mtoa huduma yeyote wa RPC.

forky is a fork choice viewer for the Ethereum beacon chain. Consensus client developers self-host it or use the public instances to see and debug fork choice behavior on mainnet and testnets.

sol-profiler is a command line tool that lists a Solidity contract's methods with their visibility, mutability and modifiers. Reviewers run it to see the surface of a contract at a glance.

tracoor is an explorer for beacon states and execution traces. Client and protocol developers self-host it to inspect block and state traces on devnets and testnets.

Slippy is a Solidity linter for static analysis of smart contracts. Teams install the npm package to lint contracts as part of a build.

4byte.directory maps four-byte function selectors and 32-byte event-signature hashes to their human-readable signatures. Builders query it when decoding calldata or logs from contracts without a published ABI.

viem-tracer inaboresha mteja wa Viem ili miito iliyoshindwa ya ethestimateGas na ethsendTransaction ijumuishe kiotomatiki matokeo ya ufuatiliaji yanayosomeka na binadamu yaliyosimbuliwa na sourcify.dev, na inaongeza wasaidizi waliochapishwa karibu na debug_traceCall ili wasanidi programu waweze kukagua utekelezaji bila kuondoka kwenye mrundikano wao uliopo wa RPC.

Chimera ni mfumo wa kuandika majaribio ya Solidity katika Foundry na kuweza kuyatumia tena na Zana zingine za Chanzo Wazi kama vile Echidna, Medusa, Halmos na Kontrol

Slither ni injini ya uchanganuzi tuli ya Python ya Trail of Bits kwa Solidity na Vyper: iendeshe katika CI ili kuwasha vigunduzi, kuchapisha mionekano ya kimuundo ya mikataba, au kuandika hati za ukaguzi maalum kwenye misingi yote ya msimbo.

Echidna is a property-based and grammar fuzzer for Ethereum smart contracts. Builders and auditors write properties with it to find inputs that break contract invariants.

Synpress inaweka Playwright na otomatiki ya kivinjari inayotambua Ethereum ili uweze kujaribu programu tumizi zilizogatuliwa (dapps) kutoka mwanzo hadi mwisho, ikijumuisha madirisha ibukizi ya mkoba na swichi za mnyororo, katika CI.

ItyFuzz is a bytecode-level smart-contract fuzzer that combines fuzzing with symbolic analysis. Builders and auditors run it against EVM bytecode when source-level fuzzing is not enough or no source is available.

Aderyn ni kichanganuzi tuli cha mkataba mahiri wa Solidity cha chanzo wazi, kinachotegemea Rust cha Cyfrin kilichoundwa kusaidia wahandisi wa itifaki na watafiti wa usalama kupata udhaifu katika misingi ya msimbo wa Solidity

Medusa ni fuzzer ya mkataba mahiri yenye hali iliyohamasishwa na Echidna. Inatoa majaribio ya fuzz yaliyosambamba ya mikataba mahiri na uthibitishaji wa vibadilikaji vya hali ya juu vya mkataba mahiri.

eth-tester is a pluggable in-memory Ethereum backend used by web3.py for fast unit tests. Python builders import it when tests should run against a simulated chain instead of a node.

Titanoboa ni mkalimani mwingiliano wa Vyper na mfumo wa majaribio kwa mizunguko ya maoni ya haraka unapofanya majaribio na mikataba nje ya mzunguko kamili wa Foundry.

Hive is an end-to-end integration test harness that runs Ethereum clients in Docker across simulator scenarios. Client teams use it to check that implementations agree with each other.

goevmlab is an EVM fuzzing and differential testing lab built by a go-ethereum core developer. EVM implementers use it to fuzz their own implementation and compare its behavior against others to find divergences.

solidity-coverage inatoa ufunikaji wa msimbo wa mkataba mahiri kwa jukwaa la msanidi programu la Hardhat. Ni sahihi sana, inasaidia mkusanyiko kamili wa viaIR wa Solidity na seti kubwa ya mifumo ya tawi la msimbo maalum kwa Solidity. Imesakinishwa kwenye miradi ~230k ya GitHub na inapakuliwa mara ~100k kwa wiki kutoka NPM.

hevm ni injini ya utekelezaji ya EVM ya chanzo wazi, ya kisasa, ya haraka ya kiishara na thabiti inayoweza kupata matatizo katika mikataba mahiri. Kupitia mfumo wake wa utekelezaji na uchanganuzi wa kiishara, hevm inaweza kutekeleza mikataba kiishara, nusu-thabiti, au thabiti ili kupata hitilafu, au kulinganisha mikataba miwili tofauti kwa tofauti, ikifanya ukaguzi wa usawa.

Crytic-Properties ni seti ya majaribio ya usalama yanayoweza kutumika tena kwa baadhi ya viwango vya tokeni vinavyotumiwa sana kama vile ERC-20, ERC-721, ERC-4626, na zaidi.

AuditHub is Veridise's hosted security platform that connects to a GitHub repository and runs automated checks on every commit. It bundles Vanguard (static analysis for Solidity 0.8.4 and newer, in Hardhat and Foundry projects), OrCa (a specification-driven fuzzer for multi-contract DeFi protocols), Picus (determinism verification for ZK circuits) and ZK Vanguard (static analysis for ZK circuits). Smart contract and ZK teams use it to catch reentrancy, specification violations and underconstrained circuits during development, before an external audit.

contender from Flashbots is a load-testing tool that floods EVM execution nodes over JSON-RPC and benchmarks the results. Teams benchmarking a client point it at an endpoint to generate load and measure throughput.

Kizalishaji cha majaribio cha mkataba mahiri kinachotegemea Mbinu ya Mti wa Matawi.

spamoor is a configurable Ethereum transaction generator for load-testing testnets and devnets with realistic traffic. Teams point it at a network to see how it behaves under sustained transaction volume.

Assertoor runs configurable checks and assertions against a live Ethereum devnet to validate its behavior. Client and devnet teams use it to confirm a running network is healthy, in the same family as Hive.

KEVM ni semantiki inayoweza kutekelezwa ya K-framework ya EVM: ielekeze kwenye msimbo wa baiti unapohitaji utekelezaji uliokaguliwa kwa kufuata, uchunguzi wa kiishara, hoja za gesi, au uthibitisho unaofuatilia sheria za Ethereum kwa karibu.

hax ni zana ya tafsiri za uhakika wa juu za kitengo kikubwa cha Rust katika lugha rasmi kama vile F* au Rocq.

Certora Prover is a cloud formal-verification service that checks specifications written in CVL against deployed contract code. Verification engineers use it to prove that a contract holds stated properties for all inputs.

Kontrol inainua majaribio ya mali ya Foundry kuwa uthibitisho unaoungwa mkono na KEVM ili uweze kufuatilia dhamana rasmi kwa kazi ndogo ya vipimo vilivyoandikwa kwa mkono kuliko KEVM ghafi pekee.

Act ni lugha ya ubainishaji ya kutangaza ya Ethereum na msururu wa zana kwa ajili ya kuelezea tabia zote za programu ya EVM ili vitatuzi vya SMT, wathibitishaji wa nadharia, au zana za uchanganuzi wa kiuchumi ziweze kufikiri kuhusu usahihi wa kiwango cha msimbo wa baiti na uoanifu wa motisha, ikijumuisha uthibitisho wa uboreshaji wa kiotomatiki dhidi ya utekelezaji halisi.

Verifereum inaunganisha mikataba mahiri ya Ethereum na uthibitishaji wa nadharia unaoungwa mkono na HOL4 ili uweze kulenga madai yenye nguvu sana ya usahihi wakati mbinu za kiotomatiki za SMT hazitoshi.

Certora AutoProver is an AI bot that automates parts of formal verification for smart contracts. Verification engineers use it to generate and run checks with less manual specification work.