What problem does it solve? Reverse engineering smart contracts without source code is difficult: on-chain bytecode has no symbols, types, or function names. This Skill provides a structured workflow to recover ABI signatures, decompile bytecode, reconstruct storage layouts, and audit contracts for vulnerabilities like reentrancy, integer overflow, and missing access control. ## Core Features & Use Cases - Bytecode Acquisition & ABI Recovery: Fetch runtime bytecode via cast code, extract PUSH4 function selectors, and resolve signatures against 4byte.directory/etherface. - Decompilation & Disassembly: Use panoramix for pseudocode and cast disassemble for instruction-level ground truth, with cross-validation between the two. - Storage Layout Reconstruction: Read on-chain storage slots with cast storage, apply keccak256 slot derivation for mappings and dynamic arrays, and handle EIP-1967 proxy contracts. - Vulnerability Analysis: Detect reentrancy, integer overflow, and permission flaws, with optional echidna fuzzing and hevm symbolic execution for behavioral verification. - Use Case: Given only a contract address suspected of being a scam token, pull its bytecode, recover the ABI, decompile the transfer logic, and identify hidden owner-only mint or fee functions. ## Quick Start Analyze the smart contract at address 0xDEAD... by fetching its bytecode, recovering the ABI, decompiling it, and checking for reentrancy and access-control vulnerabilities.
