安全与测试

AuditHub

模糊/属性测试

安全性 · 静态分析 · 模糊测试 · 形式化验证 · Solidity · 持续集成

网站社交 Veridise/AuditHub-Client Veridise/audithub-mcp Veridise/audithub-skills https://pypi.org/project/audithub-client/

AuditHub is Veridise's hosted security platform that connects to a GitHub repository and runs automated checks on every commit. It bundles Vanguard (static analysis for Solidity 0.8.4 and newer, in Hardhat and Foundry projects), OrCa (a specification-driven fuzzer for multi-contract DeFi protocols), Picus (determinism verification for ZK circuits) and ZK Vanguard (static analysis for ZK circuits). Smart contract and ZK teams use it to catch reentrancy, specification violations and underconstrained circuits during development, before an external audit.

相关资源

Chimera

Chimera 是一个在 Foundry 中编写 Solidity 测试的框架，并能够与其他开源工具（如 Echidna、Medusa、Halmos 和 Kontrol）一起重用它们。

Slither

斯莱瑟是 Trail of Bits 用于 Solidity 和 Vyper 的 Python 静态分析引擎：在 CI 中运行它以触发检测器、打印合约的结构视图，或在整个代码库上编写自定义检查脚本。

Echidna

Echidna is a property-based and grammar fuzzer for Ethereum smart contracts. Builders and auditors write properties with it to find inputs that break contract invariants.

Synpress

Synpress 将 Playwright 与感知以太坊的浏览器自动化分层，以便你可以在 CI 中对去中心化应用 (dapp) 进行端到端测试，包括钱包弹出窗口和链切换。

ItyFuzz

ItyFuzz is a bytecode-level smart-contract fuzzer that combines fuzzing with symbolic analysis. Builders and auditors run it against EVM bytecode when source-level fuzzing is not enough or no source is available.

Aderyn

Aderyn 是 Cyfrin 开源的、基于 Rust 的 Solidity 智能合约静态分析器，旨在帮助协议工程师和安全研究人员在 Solidity 代码库中发现漏洞。