安全工具

title: 安全工具
weight: 4
description: 区块链/Web3安全工具
keywords:
 - smart contract security
 - 智能合约安全
 - Token 安全
 - DeFi 安全
 - Web3安全工具​

内容主要来自 Web3-Security-Tools，做部分补充

总览

VM相关

• ZIION VM

区块链取证工具

区块链浏览器

• Etherscan
• btc.com
• Bscscan
• Polygonscan
• 通用浏览器
  1. Blockchain.com
  2. Blockchair.com

智能合约反编译

• Dedaub
• Panoramix
• abi-decompiler
• Eveem Solidity反编译器

浏览器插件

• Tenderly
• MetaDock
• Sentio
• Blockchair
• Impersonator

Rug 检查工具

• Rug Pull Finder
• bscheck
• rugscreen
• QuillCheck
• poocoin’s rugcheck
• tokensniffer
• rugpulldetector
• rugdoc honeypot checker

Txn 可视化工具

• MistTrack
• ethtx.info
• Front-running explorer
• Phalcon BlockSec
• Bitquery Explorer
• Tx eth samczsun
• Tenderly
• Sentio
• Socketscan
• 3D VR blockchain visualization
• eigenphi.io
• nansen.ai
• Officer CIA’s Investigation tools list

Toke 流程可视化

• breadcrumbs.app
• bloxy.info
• ethtective.com

杂项工具

• ETH Toolbox
• DethCode
• Cryptocurrencies OSINT
• DeBank
• Tutela

智能合约审计工具

测试框架

• Foundry
• Hardhat
• Brownie
• Truffle

Fuzzers

• Echidna
• Foundry Fuzz
• ChainFuzz
• Harvey
• sFuzz

VS Code 插件

• Solidity Visual Developer
• Slither VSC
• Inline Bookmarks
• Solidity Metrics
• EthOver
• GraphViz Interactive Preview
• Mythx VSC
• Remix VSC

格式化及格式检查

• EthLint
• solidity-coverage
• Prettier + Solidity Plugin
• Doc-Gen
• Solhint
• sol function profiler
• BSOL 一个为Solidity代码片段和智能合约编写基准测试的工具

可视化工具

• Solidity Visual Developer
• Sūrya
• Solgraph
• EVM Lab
• Ethereum-graph-debugger

动静态分析

• Slither
• MythX
• Mythril
• Manticore
• securify2
• Eth Security Toolbox
• smartcheck
• solidityscan.com
• Fuzzinglab’s Octopus
• Pakala 以太坊攻击性漏洞扫描器，详见使用Pakala窃取以太坊
• Karl 智能合约安全漏洞检查工具
• Verisol 来自微软的Solidity智能合约的正式验证和分析工具

审计指南

• The Auditors Book
• Solodit.xyz
• Audit Hero
• Solidity Attack Vectors
• Audit Checklist
• Awesome Solidity Gas Optimizations
• Secureum Blogs
• Diligence - Smart Contract Best Practices
• Blockchain Hacking QuickStart Guide
• How to Become a Smart Contract Auditor by Cmichel

钱包安全

• Stelo Labs
• BlowFish
• Pocket Universe
• Wallet Guard
• Interlock
• Revoke.cash
• Novus
• Web3 Antivirus
• PeckShield Alert

更多参考

https://github.com/OffcierCia/On-Chain-Investigations-Tools-List
https://github.com/shantanhunt/Smart-Contract-Auditor-Tools-and-Techniques
https://github.com/Anugrahsr/Awesome-web3-Security

https://github.com/RektifyAI/auditing-demystified