Guides, tutorials, and research for EVM decompilation and smart contract security.
We spent the summer pairing benchmarks with real-world decompiles to ship EVMDec-3. It hits 100% completeness, flirts with 50% recompilation success, and PLUS/PRO users can try it right now.
Most contracts never publish source, so we lined up Dedaub, Panoramix, Heimdall-rs, and EVMDecompiler.com to see how each one turns bytecode into something you can actually read.
A shared Dx Protocol locker kept paying out even while it swore tokens were locked. One timing bug in unlockToken() was all an attacker needed to withdraw on repeat.
We decompiled a drained MEV bot and found the usual suspects: raw msg.sender.call() and no-auth token transfers. Together they handed the attacker every asset in the contract.
We grabbed an NFT contract with no source, rebuilt walletOfOwner from bytecode, and watched the while loop, memory allocation, and owner checks snap back into place.