mythril 0.18.13

Security analysis tool for Ethereum smart contracts

Mythril Classic

Mythril Classic is an open-source security analysis tool for Ethereum smart contracts. It uses concolic analysis, taint analysis and control flow checking to detect a variety of security vulnerabilities.

Whether you want to contribute, need support, or want to learn what we have cooking for the future, our Discord server will serve your needs!

Oh and by the way, we're also building an easy-to-use security analysis platform (a.k.a. "the INFURA for smart contract security") that anybody can use to create purpose-built security tools. It's called Mythril Platform and you should definitely check it out.

Installation and setup

Get it with Docker:

$ docker pull mythril/myth

Install from Pypi:

$ pip3 install mythril

See the Wiki for more detailed instructions.

Usage

Instructions for using the 'myth' tool are found on the Wiki.

For support or general discussions please join the Mythril community on Discord.

Vulnerability Remediation

Visit the Smart Contract Vulnerability Classification Registry to find detailed information and remediation guidance for the vulnerabilities reported.

Presentations, papers and articles

• Analyzing Ethereum Smart Contracts for Vulnerabilities
• What Caused the Parity SUICIDE Vulnerability & How to Detect Similar Bugs
• Detecting Integer Overflows in Ethereum Smart Contracts
• How Formal Verification Can Ensure Flawless Smart Contracts
• Smashing Smart Contracts for Fun and Real Profit
• HITBSecConf 2018 - Presentation video
• EDCon Toronto 2018 - Mythril: Find bugs and verify security properties in your contracts