arjtriv

arjtriv / dark_solver

Public

EVM contract auditing via symbolic execution and Z3

audit evm formal-methods symbolic-execution z3
19
1
100% credibility
Found Mar 02, 2026 at 19 stars -- GitGems finds repos before they trend. Get early access to the next one.
Sign Up Free
AI Analysis
Rust
AI Summary

Dark Solver audits a single Ethereum smart contract for vulnerabilities using symbolic execution and math proofs, producing reproducible findings for review without executing real transactions.

How It Works

1
🔍 Discover Dark Solver

You hear about a helpful tool that checks smart contracts for hidden dangers without running real transactions.

2
📥 Get the tool

Download the simple package to your computer.

3
⚙️ Connect to the blockchain

Tell it where to look up contract details by adding your free blockchain viewer link.

4
🎯 Choose a contract

Pick the smart contract address you want to safety-check.

5
🚀 Run the safety scan

Click to start – it thinks deeply and explores every path the contract could take.

6
📊 Review the report

See clear lists of potential issues with exact steps and proofs.

✅ Stay safe

You now know the contract's weak spots or confirm it's solid, all from safe simulations.

Sign up to see the full architecture

5 more

Sign Up Free

Star Growth

See how this repo grew from 19 to 19 stars Sign Up Free
Repurpose This Repo

Repurpose is a Pro feature

Generate ready-to-use prompts for X threads, LinkedIn posts, blog posts, YouTube scripts, and more -- with full repo context baked in.

Unlock Repurpose
AI-Generated Review

What is dark_solver?

Dark Solver is a Rust-based tool for auditing single EVM contracts using symbolic execution and the Z3 solver. Feed it an EVM contract address, RPC endpoint, and chain ID via a simple CLI script, and it hydrates bytecode plus chain state to hunt protocol-specific vulnerabilities like AMM drains or oracle manipulations. You get structured findings, calldata payloads, solver proofs, and replayable telemetry—ideal for reproducible security reviews of evm contracts without fuzzing noise.

Why is it gaining traction?

Unlike fuzzers that chase runtime signals or static analyzers stuck on surface patterns, it proves multi-step exploits with math constraints, invariant gates, and proxy-aware hydration. Developers dig the deterministic outputs for manual verification, plus RPC-resilient hydration that handles real-world evm contract storage and bytecode quirks. Early adopters on cosmos evm github and evm bridge github praise its focus on high-value DeFi risks over broad coverage.

Who should use this?

EVM auditors manually verifying evm contract address metamask or trust wallet integrations before audits. Security researchers targeting lending pools, AMMs, or groth16 verifiers in evm contracting workflows. Teams dodging evm contract size limit gotchas or evm drainer github pitfalls on chains like Base.

Verdict

Grab it for targeted evm bytecode decompiler github-style audits if you're deep in DeFi security—CLI is dead simple, docs cover workflows. At 19 stars and 1.0% credibility, it's raw early-stage (solid tests, but light ecosystem); pair with fuzzers until maturity grows.

(187 words)

Sign up to read the full AI review Sign Up Free

Similar repos coming soon.