# crytic/building-secure-contracts

Guidelines and training material to write secure smart contracts

Repository: https://github.com/crytic/building-secure-contracts
Canonical: https://ross.abutalabs.com/products/building-secure-contracts
Homepage: https://secure-contracts.com/
Language: Solidity
License: AGPL-3.0
License Family: copyleft
Last push: 2026-04-13T21:32:17+00:00

## Health v2 (maintenance only)
Score: 57/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 77, release rhythm 8, longevity 100
- inputs: {"age_days": 2427, "days_push": 142, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2481, forks 389 (observed 2026-08-28T04:06:55.298733+00:00)

## What it is
A Trail of Bits maintained collection of guidelines, best practices, and training material for developing secure smart contracts. It covers secure development workflows, EVM internals, common vulnerability examples across many chains, and tutorials for automated analysis tools like Echidna, Medusa, Slither, and Manticore.

## Use cases
- learn how to write secure smart contracts
- fuzz test solidity contracts with echidna or medusa
- find examples of common smart contract vulnerabilities
- create an incident response plan for a blockchain project
- understand EVM opcodes and transaction tracing
- checklist for integrating arbitrary tokens safely
- evaluate the security maturity of a smart contract codebase

## When to choose
- you are developing or auditing Ethereum/EVM smart contracts and want security best practices
- you need hands-on tutorials for Trail of Bits analysis tools like Echidna, Medusa, Slither, or Manticore
- you want vulnerability examples for chains beyond Ethereum such as Solana, Cosmos, or TON

## When to avoid
- you need an executable security tool rather than documentation and training material
- your project is not blockchain or smart-contract related
- you need formal verification guarantees rather than guidelines and fuzzing tutorials

## Facets
- artifact type: learning-resource
- maturity: active
- function: security, fuzzing, testing, documentation, developer-tools
- domain: blockchain, security, developer-tools, tutorials
- platform: cross-platform, cli
- tags: smart-contracts, solidity, ethereum, evm, blockchain-security, static-analysis, symbolic-execution, trail-of-bits, docker

## Member repositories
- crytic/building-secure-contracts (main) score 57

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:55.298733+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:28:13.994489+00:00, confidence not recorded.
  - readme: https://github.com/crytic/building-secure-contracts (fetched 2026-08-28T04:06:55.298733+00:00, sha 349e5211377d)
  - homepage: https://secure-contracts.com/ (fetched 2026-08-29T10:10:09.977386+00:00, sha 742a92f7db53)
  - site_page: https://secure-contracts.com/program-analysis/medusa/docs/src/index.html (fetched 2026-08-29T10:10:09.981851+00:00, sha 6cf1b177e2c0)
  - site_page: https://secure-contracts.com/program-analysis/medusa/docs/src/getting_started/installation.html (fetched 2026-08-29T10:10:09.983624+00:00, sha 10869aaed0a9)
  - site_page: https://secure-contracts.com/program-analysis/echidna/introduction/installation.html (fetched 2026-08-29T10:10:09.979847+00:00, sha 02d7c33bcccc)
  - site_page: https://secure-contracts.com/program-analysis/medusa/docs/src/getting_started/first_steps.html (fetched 2026-08-29T10:10:09.985404+00:00, sha 8683a44f8cb3)
  - site_page: https://secure-contracts.com/program-analysis/medusa/docs/src/project_configuration/overview.html (fetched 2026-08-29T10:10:09.987005+00:00, sha 110ebc589df4)
  - site_page: https://secure-contracts.com/program-analysis/medusa/docs/src/project_configuration/fuzzing_config.html (fetched 2026-08-29T10:10:09.988592+00:00, sha 0393d2c5bce5)
  - site_page: https://secure-contracts.com/program-analysis/medusa/docs/src/project_configuration/testing_config.html (fetched 2026-08-29T10:10:09.990464+00:00, sha a5e486ece593)
  - site_page: https://secure-contracts.com/program-analysis/medusa/docs/src/project_configuration/chain_config.html (fetched 2026-08-29T10:10:09.992175+00:00, sha 6aeab6d534ea)
- Data as of 2026-08-30T08:39:29.467469+00:00.