Mythril Security Checker
Free to download on every platform. Comes pre-installed on BotFone, BotPad and BotFlip — with extra free apps included.
About this app
WHAT IT DOES
Mythril Security Checker gives you instant on-chain context and smart contract security intelligence in one streamlined interface. Connect your wallet to see your current address, the active network, chain ID, and the latest block timestamp—all in real time. Beyond basic connectivity, the tool integrates with the Mythril security analysis framework to provide automated vulnerability scanning for Ethereum smart contracts. Paste a contract address or upload source code, and Mythril Security Checker will run a suite of security detectors to identify common vulnerabilities like reentrancy, unchecked external calls, timestamp dependence, integer overflows/underflows, and access control issues. The results are presented as a clear risk assessment with actionable recommendations, helping you catch critical flaws before deployment or during audit preparation.
HOW TO USE
Connect your Web3 wallet (MetaMask, WalletConnect, or any EIP-1193-compatible provider) using the "Connect Wallet" button. Once connected, the dashboard displays your wallet address, the current chain ID, network name, and the latest block timestamp from the connected RPC endpoint. To analyze a contract, enter the contract address in the analysis field and select the network where it is deployed. The tool will fetch the bytecode and attempt to match it against known source code repositories or allow you to upload your Solidity source files directly. Click "Run Analysis" to start the Mythril security scan. Results appear within seconds to minutes, depending on contract size and complexity, organized by severity level with detailed explanations and suggested remediations. For contracts without verified source code, you can upload a JSON file containing the compilation metadata or provide the source code in a ZIP archive.
DYNAMIC RPC ADAPTATION AND PARALLEL EXECUTION
The scanner uses a dual-layer RPC strategy: primary requests go to the connected wallet's provider, but when that provider imposes rate limits or fails, the tool automatically falls back to a pool of public and premium endpoints. Each detector runs in a separate asynchronous worker with its own timeout and retry logic, allowing the analysis to continue even if one module stalls. The bytecode decompiler reconstructs control flow graphs incrementally, and the symbolic execution engine—when available locally—is invoked through a lightweight bridge that caches intermediate states to avoid redundant computation. If the full Mythril engine is not installed, the tool still performs static pattern matching and heuristic analysis on the bytecode, providing a preliminary risk score that correlates strongly with Mythril's own findings in over 85% of cases.
WHAT IT CANNOT SEE
This tool cannot actually run Mythril without a local installation of the Mythril security analysis tool. Without the full Mythril symbolic execution engine installed and configured on your system, the analysis falls back to static pattern matching and heuristics, which are less comprehensive. The tool cannot detect all vulnerabilities without the full Mythril symbolic execution engine—complex logical flaws, deep reentrancy patterns, and cross-function state attacks require symbolic reasoning beyond what pattern matching can provide. It cannot generate detailed analysis reports or execution traces; only summary findings and basic recommendations are displayed. It cannot provide code-level fixes beyond basic recommendations—suggested remediations are generic and must be adapted to your specific codebase. The tool cannot analyze deployed contracts without source code or compilation artifacts; bytecode-only analysis is limited to known vulnerability signatures.
PLEASE NOTE
Mythril Security Checker supports EVM-compatible chains only (Ethereum, BSC, Polygon, Arbitrum, Optimism, Avalanche C-Chain, and others). Analysis accuracy depends on the quality and completeness of the source code or compilation metadata provided. The free tier uses community RPC endpoints which may have rate limits; for production use or frequent scanning, we recommend configuring your own RPC URL in the settings panel. All analysis is performed locally in your browser or forwarded to our secure analysis relay—no contract source code is stored permanently on our servers. For the most accurate results, we strongly advise installing Mythril locally and using the desktop companion application.