Ethereum/EVM Smart Contract Reverse Engineering & Disassembly - Blockchain Security #3

How to disassemble EVM bytecode and reconstruct the control flow graph of an Ethereum smart contract.

📥 Download the slides: academy.fuzzinglabs.com/introduction-to-ethereum-security?co… Today I'm showing how EVM disassembly works and how to reconstruct the control flow graph (CFG) of an Ethereum smart contract when you only have access to the bytecode (closed-source). It's really useful when you're looking to analyze in-depth a contract at the EVM assembly level. #Reversing #Ethereum #EVM 00:00 Introduction 02:04 Introduction to EVM reversing 05:08 Bytecode disassembly 07:26 Control Flow Graph (CFG) reconstruction 13:26 Fonctions identification 16:55 Functions name recovery 19:54 Example with the Bored Ape (BAYC) contract 22:46 Why use reverse engineering on Ethereum smart contract? 24:46 Bytecode optimization 27:25 Smart contract Post-mortem analysis 28:46 Conclusion Links: - academy.fuzzinglabs.com/introduction-to-ethereum-security?co… - Video Devcon4: archive.devcon.org/archive/watch/4/reversing-ethereum-smart-… - Bored Ape (BAYC) contract: etherscan.io/address/0xbc4ca0eda7647a8ab7c2061c2e118a18a936f… - Ethereum Signature Database: 4byte.directory/ - ethervm.io/decompile/0xBC4CA0EdA7647A8aB7C2061c2E118A18a936f… ==== 💻 FuzzingLabs Training ==== - C/C++ Whitebox Fuzzing: academy.fuzzinglabs.com/c-whitebox-fuzzing?coupon=youtube - Rust Security Audit and Fuzzing: academy.fuzzinglabs.com/rust-security-audit-and-fuzzing-trai… - WebAssembly Reversing and Dynamic Analysis: academy.fuzzinglabs.com/wasm-security-reversing-dynamic-anal… - Go Security Audit and Fuzzing: academy.fuzzinglabs.com/go-security-audit-and-fuzzing?coupon… ==== 🦄 Join the community ==== academy.fuzzinglabs.com/fuzzing-labs-community ==== 📡 Socials ==== - Twitter: twitter.com/FuzzingLabs - Telegram: t.me/fuzzinglabs - TikTok: tiktok.com/@fuzzinglabs Keywords: Reversing, Reverse Engineering, EVM, Ethereum Smart contract, Solidity, Disassembly, Decompilation, EVM bytecode, opcode Link to this video: youtu.be/I6VDBvX9Pkw