Tutorial
Audit Unverified Smart Contracts
Professional audits usually start from verified source. In practice, analysts constantly face unverified deployments, malicious forks, and proxy indirection. This workflow shows how to extract maximum signal from bytecode alone.
Recommended audit workflow
- Identify network and fetch bytecode; check for proxy implementation.
- Decompile and map public/external functions via ABI recovery.
- Review CFG for external calls, value transfers, and access control.
- Cross-reference selectors with known exploit patterns and admin functions.
- Compare against a reference deployment if one exists.
Red flags in decompiled output
- Unrestricted delegatecall or selfdestruct paths
- Owner setters without event emission
- Obfuscated dispatch or unusual jump patterns
- Mismatch between claimed protocol and recovered logic
Try it now
Open the free EVM decompiler — paste an address or bytecode and get results in seconds.
Related: Proxy Contract Decompiler · ABI Recovery from Bytecode · Control Flow Graph Analysis