Tutorial

Manticore Tutorial

The aim of this tutorial is to show how to use Manticore to automatically find bugs in smart contracts.

The first part introduces a set of the basic features of Manticore: running under Manticore and manipulating smart contracts through API, getting throwing path, adding constraints. The second part is exercise to solve.

Table of contents:

• Requirements
• Running under Manticore
• How to get throwing path
• How to add constraints
• Exercise

Join the team on Slack at: https://empireslacking.herokuapp.com/ #ethereum

Requirements

• Basic Python Knowledge
• Docker container

All the material of this tutorial is included in our eth-security-toolbox. Run:

$ docker pull trailofbits/eth-security-toolbox
$ docker run -it trailofbits/eth-security-toolbox

The examples and the exercises are inspired from our TruffleCon workshop. Once in the docker, run:

cd "/home/ethsec/workshops/Automated Smart Contracts Audit - TruffleCon 2018/manticore"