# ConsenSysDiligence/mythril

Mythril is a symbolic-execution-based securty analysis tool for EVM bytecode. It detects security vulnerabilities in smart contracts built for Ethereum and other EVM-compatible blockchains.

Repository: https://github.com/ConsenSysDiligence/mythril
Canonical: https://ross.abutalabs.com/products/mythril
Homepage: https://mythx.io/
Language: Python
License: MIT
License Family: permissive
Topics: security-analysis, ethereum, blockchain, smart-contracts, solidity, program-analysis, security, symbolic-execution
Last push: 2026-04-27T04:13:25+00:00

## Health v2 (maintenance only)
Score: 58/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 79, release rhythm 8, longevity 100
- inputs: {"age_days": 3271, "days_push": 128, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 4265, forks 819 (observed 2026-08-28T04:08:40.701327+00:00)

## What it is
Mythril is a symbolic-execution-based security analysis tool for EVM bytecode that detects vulnerabilities in Ethereum and other EVM-compatible smart contracts. It is distributed as a Python CLI (also via Docker and pre-commit hooks) and analyzes Solidity source files or on-chain contract addresses.

## Use cases
- scan solidity smart contracts for security vulnerabilities
- analyze deployed ethereum contract bytecode for exploits
- find reentrancy and selfdestruct bugs in smart contracts
- run automated security checks in CI before a smart contract audit
- disassemble and inspect EVM bytecode
- audit solidity code against the SWC vulnerability registry

## When to choose
- you need free, local, open-source static/symbolic analysis of EVM contracts
- you want to analyze contracts without submitting source code to a SaaS
- you work with Ethereum or other EVM-compatible chains
- you want a pre-commit or CI-integrated smart contract security scanner

## When to avoid
- you need the broadest coverage and hosted performance of a commercial SaaS scanner
- you need fuzzing rather than symbolic execution (consider Diligence Fuzzing)
- your contracts target non-EVM blockchains
- you require guaranteed up-to-date support for the newest Solidity versions

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, vulnerability-scanning, cli, penetration-testing
- domain: security, blockchain, developer-tools
- platform: python, cli, windows
- tags: ethereum, evm, solidity, symbolic-execution, static-analysis, smart-contract-security, program-analysis, smart-contracts, docker, linux, macos

## Member repositories
- ConsenSysDiligence/mythril (main) score 58

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:40.701327+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:22:03.344328+00:00, confidence not recorded.
  - readme: https://github.com/ConsenSysDiligence/mythril (fetched 2026-08-28T04:08:40.701327+00:00, sha 217bcb743f86)
  - homepage: https://mythx.io/ (fetched 2026-08-29T09:11:40.717146+00:00, sha 75797affa46c)
  - site_page: https://mythx.io/about (fetched 2026-08-29T09:11:40.726175+00:00, sha b40ec2cb2fd9)
  - site_page: https://mythx.io/faq (fetched 2026-08-29T09:11:40.728660+00:00, sha 8da55f827e54)
  - site_page: https://mythx.io/tools (fetched 2026-08-29T09:11:40.732865+00:00, sha 8f83d981145b)
- Data as of 2026-08-30T08:39:29.467469+00:00.