OpenViSTAI · Agents · Blockchain · Crypto
Submit a project
Menu
Developer Tools

Securify

Securify is a Java command-line static-analysis scanner for Ethereum smart contracts, accepting Solidity source, EVM binary and JSON decompilation output to report warnings and vulnerabilities.

Explore the practical guide ↓

Independent OpenViST project profile, based on linked sources.

Securify — OpenViST project profile in Developer Tools.
OpenViST project illustration. See the linked sources for product details.
Understand the project

Practical overview

When it fits

Use it as a legacy analysis reference or to examine its documented scanning workflow; the repository says this version is deprecated and directs users to Securify v2.0.

Who it is for

  • Ethereum developers reviewing Solidity contracts
  • Security practitioners exploring a legacy smart-contract scanning workflow

Documented uses

  • Scan Solidity source for documented contract security patterns.
  • Analyze EVM binary or JSON decompilation output.
  • Review warning-oriented or JSON-formatted analysis results.
Before you choose

Requirements & limits

  • The repository lists Java 8 and Soufflé as requirements; Solidity input additionally needs a matching solc binary.
  • The README documents Solidity, EVM binary and JSON decompilation inputs.
  • Fallback code is not analyzed, and libraries and abstract contracts have stated limitations.
  • The project is licensed under Apache-2.0.

Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.

Source-based practical guide

Run Securify on a Solidity file

Build the Java command-line tool and invoke it on a Solidity source file.

Before you start

  • Java 8
  • Soufflé installed, including the souffle binary
  • A solc binary matching the Solidity file's version

Steps

  1. Build the project with ./gradlew jar.

  2. Run java -jar build/libs/securify.jar -fs path/to/contract.sol, substituting the path to the Solidity file.

Expected outcome

Securify reports warnings and vulnerabilities identified by its analysis.

Guide limitations

  • This repository version is deprecated and no longer supported.
  • The README says Soufflé was unavailable on Windows at the time it was written.
  • Fallback-function code is not analyzed; libraries and abstract contracts have documented support limitations.
Documentation 1 ↗
Evidence and transparency

Sources & review

Official repository ↗
Source record details
Source availability
Active
Sources checked
16 October 2026
Original website title
eth-sri/securify · Official homepage title · retained in its source language
How we review sourcesSuggest a correction

Related options

Securify v2.0 — The deprecated repository directs users to this newer version.