Guides, tutorials, and research for EVM decompilation and smart contract security.
We are excited to introduce EVMDec-3, the newest version of our smart contract decompiler. Starting today, PLUS and PRO subscribers can access this model, which sets a new baseline in AI-driven decompilation quality with 100% completeness and 49.8% recompilation success.
Smart contracts secure billions of dollars, yet most deployed Ethereum contracts are closed-source. We compare four decompilers—Dedaub (Gigahorse), Panoramix, Heimdall-rs, and EVMDecompiler.com—each with unique technical foundations for lifting raw EVM bytecode into human-readable Solidity.
We discovered a critical timing vulnerability in Dx Protocol's token locking mechanism through EVM decompilation. The unlockToken() function contains a race condition that allows attackers to withdraw locked tokens multiple times, potentially draining the entire contract balance.
Our decompilation analysis of a drained MEV bot revealed two critical security vulnerabilities: unrestricted value transfers via msg.sender.call() and unauthorized token transfers. These flaws enabled attackers to completely drain the contract of both ETH and tokens.
We successfully reconstructed a complete ERC-721 enumeration function from raw bytecode, demonstrating how our decompiler preserves complex control flow, memory allocation patterns, and business logic. This case study shows how bytecode-only contracts can be audited effectively.