安全性與測試

AuditHub

模糊/屬性測試

安全性 · 靜態分析 · 模糊測試 · 形式化驗證 · Solidity · 持續整合

網站社群 Veridise/AuditHub-Client Veridise/audithub-mcp Veridise/audithub-skills https://pypi.org/project/audithub-client/

AuditHub is Veridise's hosted security platform that connects to a GitHub repository and runs automated checks on every commit. It bundles Vanguard (static analysis for Solidity 0.8.4 and newer, in Hardhat and Foundry projects), OrCa (a specification-driven fuzzer for multi-contract DeFi protocols), Picus (determinism verification for ZK circuits) and ZK Vanguard (static analysis for ZK circuits). Smart contract and ZK teams use it to catch reentrancy, specification violations and underconstrained circuits during development, before an external audit.

相關資源

Chimera

Chimera 是一個在 foundry 中編寫 Solidity 測試的框架，並能夠與 Echidna、Medusa、Halmos 和 Kontrol 等其他開源工具重複使用

Slither

斯立瑟 (Slither) 是 Trail of Bits 針對 Solidity 和 Vyper 的 Python 靜態分析引擎：在 CI 中執行它以觸發偵測器、列印合約的結構視圖，或編寫腳本對整個程式碼庫進行自訂檢查。

Echidna

Echidna is a property-based and grammar fuzzer for Ethereum smart contracts. Builders and auditors write properties with it to find inputs that break contract invariants.

Synpress

Synpress 將 Playwright 與具備以太坊感知能力的瀏覽器自動化相結合，讓您可以在 CI 中對去中心化應用程式 (dapp) 進行端到端測試，包括錢包彈出視窗和鏈切換。

ItyFuzz

ItyFuzz is a bytecode-level smart-contract fuzzer that combines fuzzing with symbolic analysis. Builders and auditors run it against EVM bytecode when source-level fuzzing is not enough or no source is available.

Aderyn

Aderyn 是 Cyfrin 基於 Rust 的開源 Solidity 智能合約靜態分析器，旨在幫助協定工程師和安全研究人員在 Solidity 程式碼庫中尋找漏洞。