Mythril Pro is developed based on original Mythril-Classic symbolic engine, utilizing storage dependency analysis to prioritize path executions and prune unnecessary search spaces. Mythril Pro is significantly more efficient and scalable, while producing exactly the same result as Mythril-Classic.
See the Wiki to install required dependencies.
You can use solc-select to quickly switch between Solidity compiler versions
Note: do not run 'pip3 install mythril' in this step, as this command installs the original Mythril-Classic.
$ pip3 install mythril Mythril Pro also requires a slightly modified version of Slither to analyze state variable dependencies.
To install the modified version of Slither:
$ git clone https://github.com/QuanZhang-William/slither.git && cd slither
$ pip3 install . To install Mythril Pro:
$ git clone https://github.com/QuanZhang-William/M-Pro.git && cd M-Pro
$ pip3 install . Get the RawOnly branch:
$ git checkout RawOnly
$ pip3 install . To Run the Tool:
navigate to directory M-Pro
python3 myth -w <contract address> Mythril Pro supports all functionalities and configuration flags of Mythril-Classic, with the following additional features:
To analyze a smart contract with branching heuristic enabled:
$ myth -w <smart contract file>Example:
$ myth -w solidity_examples/calls.solTo generate CFG with with branching heuristic enabled:
$ myth --sgraph <output file> <smart contract file>Example:
$ myth --sgraph output.html solidity_examples/calls.sol
Mythril Classic is an open-source security analysis tool for Ethereum smart contracts. It uses concolic analysis, taint analysis and control flow checking to detect a variety of security vulnerabilities.
Whether you want to contribute, need support, or want to learn what we have cooking for the future, our Discord server will serve your needs.
Oh and by the way, we're also building an easy-to-use security analysis platform called MythX that integrates seamlessly with Truffle, Visual Studio Code, Github and other environments. If you're looking for tooling to plug into your SDLC you should check it out.
Get it with Docker:
$ docker pull mythril/mythInstall from Pypi:
$ pip3 install mythrilSee the Wiki for more detailed instructions.
Instructions for using Mythril Classic are found on the Wiki.
For support or general discussions please join the Mythril community on Discord.
Visit the Smart Contract Vulnerability Classification Registry to find detailed information and remediation guidance for the vulnerabilities reported.