Mythril is a security analysis tool for Ethereum smart contracts. It uses concolic analysis, taint analysis and control flow checking to detect a variety of security vulnerabilities. The analysis is based on laser-ethereum, a symbolic execution library for EVM bytecode.
Build the Docker image:
$ git clone https://github.com/ConsenSys/mythril/
$ docker build mythril
Install from Pypi:
$ pip3 install mythril
See the Wiki for more detailed instructions.
Documentation has moved to the Wiki page.
- HITBSecConf 2018 - Smashing Ethereum smart contracts for fun and real profit
- HITBSecConf 2018 conference paper
- EDCon Toronto 2018 - Mythril: Find bugs and verify security properties in your contracts
ConsenSys Diligence is building a dedicated Mythril team. If you're a coder and/or Ethereum security enthusiast who wants to do interesting and challenging work for a decentralized organization, check out the open positions below. Feel free to apply though the form on the careers website. or ping b-mueller on Gitter.