analyzing-ethereum-smart-contract-vulnerabilities

Analyze Solidity smart contracts for vulnerabilities using Slither and Mythril.

Updated Apr 23, 2026
One-click install
npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill analyzing-ethereum-smart-contract-vulnerabilities
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: analyzing-ethereum-smart-contract-vulnerabilities
Source: https://github.com/YukiIto1999/ctf-sleuth/tree/main/.claude/skills/analyzing-ethereum-smart-contract-vulnerabilities
Command: npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill analyzing-ethereum-smart-contract-vulnerabilities

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Solidity smart contracts are immutable and can hold significant value, making pre-deployment vulnerability analysis essential to prevent exploits and financial losses.

Core Features & Use Cases

  • Static analysis with Slither to detect 90+ vulnerability patterns and code quality issues.
  • Symbolic execution with Mythril to uncover complex, path-sensitive issues like reentrancy and arithmetic overflows.
  • Triage, correlation, and generation of audit reports with structured findings and remediation guidance.
  • Use cases include security audits for DeFi contracts, incident investigations, and compliance checks for contract deployments.

Quick Start

Provide the Solidity contract path to run the audit and generate a report.

Frequently Asked Questions about analyzing-ethereum-smart-contract-vulnerabilities

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Solidity smart contracts before deployment?

Audit Solidity smart contracts by running static analysis with Slither to detect 90+ vulnerability patterns and symbolic execution with Mythril to uncover complex reentrancy or overflow issues, generating a structured report with remediation guidance.

Does Slither and Mythril work together for smart contract security analysis?

Yes, Slither and Mythril work together for smart contract security analysis by combining static analysis for broad vulnerability pattern detection with symbolic execution for path-sensitive issues like arithmetic overflows.

Can I analyze compiled bytecode for vulnerabilities without source code?

You can analyze vulnerabilities in bytecode without full source code using Mythril's symbolic execution, though providing Solidity source or Foundry and Hardhat project contexts enables broader static analysis coverage with Slither.

What's the best way to detect reentrancy vulnerabilities in DeFi contracts?

The best way to detect reentrancy vulnerabilities in DeFi contracts is using symbolic execution with Mythril to trace path-sensitive execution flows, combined with Slither's static analysis to catch associated code quality issues.

Do I need Python and Foundry installed to run smart contract audits?

You need Python 3.10+ along with Slither and Mythril installed to run smart contract audits, while Foundry or Hardhat is optional and only required if you are conducting project-level analysis across multiple contracts.

What types of security issues can Slither and Mythril miss during analysis?

Slither and Mythril may miss complex business logic vulnerabilities during analysis, as Slither focuses on known static patterns and Mythril covers path-sensitive symbolic execution, meaning custom exploit logic might require manual review.