mythril

Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Hedera, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.

blockchain ethereum smart-contracts solidity security program-analysis security-analysis symbolic-execution

History

Nikhil Parasaram d22da1c212 Merge to Master (#1680 ) * Fix error message (#1506) * Fix bug during checking potential issues (#1507) * Fix bug due to list.remove() in a loop * Mythril v0.22.25 * Add BASEFEE opcode (#1513) * Add BASEFEE opcode * Add test * Support Panic(uint256) calls for asserts in v0.8.0+ (#1514) * Support panic() asserts * Use typing extensions * Add typing extensions (#1516) * Mythril v0.22.26 * [WIP] Add safe function support (#1510) * Add safe functions cli * Add a change * Add tests * Change examples * Fix bytecode tests * Use last jump as source for yul mapping (#1518) * Mythril v0.22.27 * Fix issue with source mapping (#1526) * Fix issue with source mapping * Fix issues with deployedBytecode * Add typing * Refactor opcode files and fix issues (#1532) * Use symbol_factory (#1533) * Use symbol_factory * Black * Support native calls for delegatecall and callcode (#1534) * Fix issue with calldatasize (#1537) * Mythril v0.22.28 * Fix issue with integer arthimetic (#1541) * Fix issues with exceptions module (#1542) * Mythril v0.22.29 * Ignore plyvel (#1543) * Remove additional eth transfer (#1544) * Fix issues with out of index code (#1545) * Mythril v0.22.30 * Fixes issues by considering future concrete hashes (#1547) * Fix issues with hashing * Fix offsets and edge cases * Fix onchain storage access (#1548) * Fix issues with onsite storage access * Fix issue with copy * Fix issue with get_constraints (#1549) * Handle an edgecase from local host clients (#1550) * Handle an edgecase from local host clients * Fix eth-typing * Fix pyparsing (#1551) * Mythril v0.22.31 * Removes pyethereum Dependencies and leveldb libraries (#1555) * change versions * Move away from pyethereum dependency * Remove leveldb * Change requirements * Add rzpad() * Fix issues with sha3 * Fix sha3 edge cases * Fix setup.py * Restrict eth-utils * Restrict eth-typing * Fix py-ecc * Remove mythx analysis doc * Remove -l option from docs * Fix typing_extensions (#1556) * change versions * Move away from pyethereum dependency * Remove leveldb * Change requirements * Add rzpad() * Fix issues with sha3 * Fix sha3 edge cases * Fix setup.py * Restrict eth-utils * Restrict eth-typing * Fix py-ecc * Fix typing_extensions * Fix blake2bpy (#1557) * Fix case where loader is not present (#1558) * Use empty code to denote address (#1559) * Mythril v0.22.32 * Use concrete storage (#1562) * Support symbolic bytecode (#1560) * Support symbolic bytecode * Use hex notation * Handle swarm hash * Use requirements in setup (#1564) * Fix myth --version typo in docs (#1563) Co-authored-by: Nikhil Parasaram <nikhilparasaram@gmail.com> * Fixes issues with NoneType and restricts rlp version (#1567) * Fix when args are NoneType * Fix rlp * Fix creation case and use better error message (#1569) * Handle creation code * Fix eth-keys * Mythril v0.22.33 * Fix py-evm version (#1570) * Fix py-evm when it's in alpha * Downgrade py-evm * upgrade py-evm * remove py-evm restriction * Fix trie * Fix versions * Edit versions * Edit versions * Restrict versions * Remove eth-tester * add blake2b * Support multiple function names (#1571) * Fix the leaking file descriptor when returning a z3 smt check result (#1574) * Mythril v0.22.34 * Add more precompile tests (#1576) * Add tests for natives * Black updates * Update black * Refactor code (#1577) * clean up code * Update lolcat * Fixes issues with create with symbolic bytecode (#1578) * Handle cases when create get's symbolic bytecodes * Refactor * fix typing * Mythril v0.22.35 * Handle cases with symbolic bytecode (#1581) * Fix issues with string code * revert solc changes * Allow missing solc (#1582) * allow missing solc * reformatted * dummy commit Co-authored-by: mrx23dot <none> * Handle changes in allow-paths in solc versions 0.8.8+ (#1584) * Handle changes in allow-paths in solc versions 0.8.8+ * Add docker * Remove test * Mythril v0.22.36 * Update LICENSE (#1585) * Restrict eth-rlp, eth-keyfile (#1586) * Restrict eth-rlp * Restrict eth-keyfile * Helper functions for symbolic summaries (#1587) * Restrict eth-rlp * Restrict eth-keyfile * Add functions for summaries * Add some tweaks * Revert a change * Rewrite BaseArray class * Remove unused variable * Support Pragmas (#1591) * Support Pragmas * Fix MarkUpSafe * Stop Edelweiss temporarily (#1593) * Mythril v0.22.37 * Concolic tool (#1445) * Mythril v0.22.14 * Add trace plugin and find trace * Add finding trace * Add some changes * change help text * Add some comments * Add support for concolic strategy * Fix issues * Add concolic exec tool * Add a few fixes * Fix a few errors * Add tests * Fix test interface * Add muti flip test * Add multi contract test * Fix cases with multicontract calls * Add more tests and fixes * Fix tests * Fix mypy * Change tests and other small fixes * Add more documentation * Add some changes * Update mythril/concolic/find_trace.py Co-authored-by: JoranHonig <JoranHonig@users.noreply.github.com> * Remove space Co-authored-by: JoranHonig <JoranHonig@users.noreply.github.com> * Fix typing * Fix Review issues * Change test type * Remove deepcopy * Use 3.8 for typing * Use typing_extensions * Fix prev_state * Add changes to tests and fix some bugs * Fix address assignment * Fix issues and format * Remove set_option * Split plugins * Refactor Co-authored-by: JoranHonig <JoranHonig@users.noreply.github.com> * Mythril v0.22.38 * Fix issues with sqlite3 (#1594) * Mythril v0.22.14 * Add trace plugin and find trace * Add finding trace * Add some changes * change help text * Add some comments * Add support for concolic strategy * Fix issues * Add concolic exec tool * Add a few fixes * Fix a few errors * Add tests * Fix test interface * Add muti flip test * Add multi contract test * Fix cases with multicontract calls * Add more tests and fixes * Fix tests * Fix mypy * Change tests and other small fixes * Add more documentation * Add some changes * Update mythril/concolic/find_trace.py Co-authored-by: JoranHonig <JoranHonig@users.noreply.github.com> * Remove space Co-authored-by: JoranHonig <JoranHonig@users.noreply.github.com> * Fix typing * Fix Review issues * Change test type * Remove deepcopy * Use 3.8 for typing * Use typing_extensions * Fix prev_state * Add changes to tests and fix some bugs * Fix address assignment * Fix issues and format * Remove set_option * Split plugins * Refactor * Handle sqlite3 Co-authored-by: JoranHonig <JoranHonig@users.noreply.github.com> * Mythril v0.22.39 * Init config dir (#1595) * Mythril v0.22.40 * Fixes optimizer issue (#1597) * Init config dir * Fix solc optimizer * Mythril v0.22.41 * Handle constructor edge case (#1600) * Init config dir * Fix solc optimizer * Handle constructor edge case * Fix NPM code block issue (#1602) * Init config dir * Fix solc optimizer * Fix NPM code block issue * Extend tests * Beam search (#1606) * Init config dir * Fix solc optimizer * Add beam search * Use dict over reference * Change default execution time * Support TX constraints and refactor CLI (#1607) * Support TX constraints and refactor CLI * Fix typing * Add additional typing * Use dict over accessor * Fix z3py requirements * Init storage args * Init storage args * Init args in vm tests * Unrestrict z3 to 4.8.15.0 (#1608) * Mythril v0.22.42 * Fix caching of issues across modules (#1610) * Fix caching of issues across modules * Fix caching of issues across modules * Remove logging (#1611) * Fix caching of issues across modules * Fix caching of issues across modules * Use log.info * Merge * remove comment * Check versions before using integer module (#1613) * use more secure approach to call docker (#1614) * Mythril v0.22.43 * Use better issue annotations for search (#1615) * Check versions before using integer module * Use IssueAnnotations * Fix misc issues related to summaries (#1617) * Check versions before using integer module * Use IssueAnnotations * Fix misc issues with summaries * Fix issue with cache during summaries (#1619) * Check versions before using integer module * Use IssueAnnotations * Fix misc issues with summaries * Fix cache issue * Fix safe functions * dead link (#1616) * Fix issue with PluginSkipState (#1620) * Check versions before using integer module * Use IssueAnnotations * Fix misc issues with summaries * Fix cache issue * Fix safe functions * Fix issue with PluginSkipState * Update black * Mythril v0.23.0 * fixed module links in documentation (#1622) * Use int argument (#1625) * remove depth for jump (#1628) * Use a more precise modeling of return data (#1630) * remove depth for jump * Use a more precise modeling of return data * Fix issues with lists * Fix issues * Fix misc issues (#1631) * remove depth for jump * Use a more precise modeling of return data * Fix issues with lists * Fix issues * Fix misc issues * Mythril v0.23.1 * Correct comment (#1632) * Correct comment * Update bitvec_helper.py * Fix caching for exceptions module (#1633) * Fix loop bound and other instruction performance issues (#1635) * Fix caching for exceptions module * Fix loop bound and other instruction performance issues * Remove unused variable * Increase loop bound * Mythril v0.23.2 * Handle CRLF line endings (#1637) * Handle CRLF line endings * Add new line at the end of file * Typo: External Calls now states correctly SWC-107 (#1639) External Calls mentioned SWC-117 but links (corrrectly) to SWC-107, fixed typo to SWC-107 * Fix Bitvec issue (#1641) * Fix issues with Bitvec (#1642) * Fix Bitvec issue * Fix issues with Bitvec * Mythril v0.23.3 * Use latest blake2bpy, Fix version extraction (#1644) * Use latest blake2bpy, Fix version extraction * Fix setup.py * Handle setup.py * Handle setup.py * Handle setup.py * Fix requirements * Fix requirements * Fix requirements * restrict eth-hash * Support py36 through py39 (#1646) * Support py36 through py39 * Remove usage of cytoolz * Update tox * Add a get set for summaries (#1647) * Support py36 through py39 * Remove usage of cytoolz * Update tox * Add a get set for summaries * Mythril v0.23.4 * Deepcopy storage load and store sets (#1648) * Support py36 through py39 * Remove usage of cytoolz * Update tox * Add a get set for summaries * Support get/set * Restrict cytoolz * Move cytoolz up the dependency list * Move cytoolz up the dependency list * Fix CI (#1651) * Support py36 through py39 * Remove usage of cytoolz * Update tox * Add a get set for summaries * Support get/set * Restrict cytoolz * Move cytoolz up the dependency list * Move cytoolz up the dependency list * Add cython * Black * Remove from requirements * Add cython * Remove cython from setup * Remove cython from setup * Add cython * set cytoolz version * Add support for locking config file (#1652) * Add support for locking config file * Remove abi decode test * Fix typo * Mythril v0.23.5 * Fix issues with arbitrary jump dest (#1654) * Add partial abi support (#1655) * Fix issues with arbitrary jump dest * Support abi * Add partial abi support * Fix test * Fix test directory * Mythril v0.23.6 * Update Readme * Fix OOG issue (#1658) * Fix issues with arbitrary jump dest * Support abi * Add partial abi support * Fix test * Fix test directory * Fix OOG issue * Fix issue with simplify (#1660) * Fix issues with arbitrary jump dest * Support abi * Add partial abi support * Fix test * Fix test directory * Fix OOG issue * Fix issue with simplify * Fix typo * Fix imports for python 3.10 (#1661) * Fix issues with arbitrary jump dest * Support abi * Add partial abi support * Fix test * Fix test directory * Fix OOG issue * Fix issue with simplify * Fix typo * Fix import * Refactor * Add exit code (#1662) * Add exit code * Fix tests * Remove additional python runs in tox (#1663) Since `geth` gets killed by CI after some time, it is better to run only the necessary python versions. * Update docs and Add tutorial (#1664) * Add exit code * Update docs with tutorial * Fix docs * Reformat * Mythril v0.23.7 (#1665) * Handles issue with low constructor loop bound and new way to deal with solver-timeout (#1668) * Add exit code * Update docs with tutorial * Fix docs * Reformat * Fix the issue with loop-bound and solver-timeout * Add test changes * Restrict hexbytes * Mythril v0.23.8 (#1669) * last_jump has type `int` but is used as type `None`. (#1670) * last_jump has type `int` but is used as type `None`. "filename": "mythril/analysis/module/modules/exceptions.py" "warning_type": "Incompatible variable type [9]" "warning_message": " last_jump is declared to have type `int` but is used as type `None`." "warning_line": 28 "fix": None to 0 * Update exceptions.py * Fix typo * Add import Co-authored-by: Nikhil Parasaram <tommycjniko@gmail.com> Co-authored-by: norhh <nikhilparasaram@gmail.com> * Handle issues with simplify (#1674) * Add exit code * Update docs with tutorial * Fix docs * Reformat * Fix the issue with loop-bound and solver-timeout * Add test changes * Restrict hexbytes * Use solver over simplify * Handle OOG during CALL (#1675) * Mythril v0.23.9 Co-authored-by: Peilin Zheng <tczpl@163.com> Co-authored-by: Sir Hashalot <95114813+sirhashalot@users.noreply.github.com> Co-authored-by: Iaroslav Zeigerman <zeigerman.ia@gmail.com> Co-authored-by: Kis Gabor <mrx23dot@users.noreply.github.com> Co-authored-by: Serafim Cloud <55061526+serafimcloud@users.noreply.github.com> Co-authored-by: JoranHonig <JoranHonig@users.noreply.github.com> Co-authored-by: shafu.eth <selfouly@gmail.com> Co-authored-by: Zach Obront <zobront@gmail.com> Co-authored-by: 72521 <ysl47698@gmail.com> Co-authored-by: Christian <christiancattai@gmail.com> Co-authored-by: Luca Di Grazia <luca.digrazia94@gmail.com>		2 years ago
..
analysis	Merge to Master (#1680 )	2 years ago
cli_tests	Refactor cli (#1033 )	5 years ago
disassembler	SQLite Signature DB (#758 )	6 years ago
instructions	Merge to Master (#1680 )	2 years ago
integration_tests	Merge to Master (#1680 )	2 years ago
laser	Merge to Master (#1680 )	2 years ago
mythril	Merge to Master (#1680 )	2 years ago
plugin	whoop whoop black	5 years ago
testdata	Merge to Master (#1680 )	2 years ago
teststorage	Fix some issues per viewers' advices	7 years ago
__init__.py	Fix merge conflicts	6 years ago
cmd_line_test.py	Merge to Master (#1680 )	2 years ago
disassembler_test.py	[WIP] Handle exponents (#1497 )	3 years ago
evmcontract_test.py	Apply better doc string formatting	6 years ago
graph_test.py	Merge to Master (#1680 )	2 years ago
rpc_test.py	[WIP]Use latest mythril CI image (#1463 )	4 years ago
solidity_contract_test.py	Merge to Master (#1680 )	2 years ago
statespace_test.py	Merge to Master (#1680 )	2 years ago
util_tests.py	Merge to Master (#1680 )	2 years ago