1. 测试开发
   1. TS/JS
      1. Embark - written in JS - no update for 3 years
      2. Truffle - upon web3.js - written in TS+JS
         1. Truffle
         2. Ganache - local Ethereum node
         3. Drizzle
      3. Hardhat - upon ethers.js - written in TS
         1. Hardhat Network - local Ethereum node
         2. Mochajs + chai - unit testing
   2. Python
      1. Brownie - upon web3.py - written in Python - support for Solidity and Vyper
         1. Pytest - unit testing
         2. Hypothesis - property-based testing & stateful testing
      2. ApeWorX
   3. Solidity
      1. Dapptools - written in Haskell
         1. dapp
         2. seth
         3. hevm
         4. ethsign
      2. Foundry - rewrite of DappTools in Rust
         1. Forge
         2. Cast
         3. Anvil - local Ethereum node
2. Static analysis 静态分析
   1. linters
      1. Solhint - written in Python - Vscode的solidity插件和Remix用的都是这个
      2. Ethlint (Solium) - no update for 3 years
   2. Slither - written in Python - author: Trail of Bits
      1. 视频
   3. 4naly3er - written in TS
   4. Securify - Version1.0: deprecated - Version2.0: no update for 3 years
   5. SmartCheck - deprecated in 2020
   6. Rattle - written in Python
   7. 一个审计员开发的新工具 支持chatGPT检查注释
3. Fuzzing 模糊测试
   1. 基于属性的模糊测试
      1. Echidna - written in Haskell - author: Trail of Bits
      2. Foundry Fuzz
      3. diligence-fuzzing - author: ConsenSys Diligence （体验阶段）
         1. Scribble - author: ConsenSys Diligence （测试阶段）
      4. 需要手动自定义属性
      5. 可以利用单元测试自动生成属性
   2. 黑盒模糊测试
      1. ContractFuzzer - written in Go - no update for 3 years
   3. 灰盒模糊测试
      1. Harvey - fuzzer of MythX - author: ConsenSys
4. Formal Verification 形式化验证
   1. SMTChecker - Solidity编译器自带的
      1. assert
      2. require
   2. Symbolic execution 符号执行
      1. Manticore - written in Python - author: Trail of Bits
      2. Mythril - written in Python - author: ConsenSys
         1. wiki
         2. 官方文档
         3. 与Scribble一起用
      3. hevm DappTools Haskell编写
      4. 比较久没有更新且star数较少
         1. Oyente - written in JS
            1. 视频
         2. Maian - written in Python
         3. TeEther - written in Python
   3. 付费服务
      1. MythX
         1. 核心组成
            1. 静态分析器 (Maru)
            2. 符号分析器 (Mythril)
            3. 灰盒模糊器 (Harvey)
         2. 扫描模式
            1. 快速5min
            2. 标准30min
            3. 深度90min
         3. 付费模式
            1. On Demand (US$9.99/3 scans)按需
            2. Developer (US$49/mo)开发者版 500 scans/month 不支持深度扫描
            3. Professional (US$249/mo) 专业版 10 000 scans/month
            4. Enterprise (Custom pricing)企业定制
      2. VerX - author: ChainSecurity
      3. Certora
      4. Beosin-VaaS - author: Beosin