Smart Contract Security Projects — Find and Fix Vulnerabilities
Smart contract security focuses on detecting and mitigating bugs that can drain funds or break logic. Final-year projects that implement static analysis, fuzzing or structured audit workflows — with clear vulnerability reports and metrics — produce strong, industry-relevant results.
Below are 80+ topics across vulnerability classes, static analysis, fuzzing, formal methods concepts, audit methodology and applications, with tools (Slither, Echidna, Foundry, Hardhat) and datasets (SmartBugs, SWC examples).
Slither
Echidna
Foundry
Solidity
SmartBugs
SWC Registry
| # | Smart Contract Security Project Topic | Tools · Datasets |
|---|---|---|
| ⚠️ Vulnerability Classes · Common Bugs | ||
| 01 | VulnReentrancy Detection and Mitigation Patterns | Slither, SWC-107 |
| 02 | VulnAccess Control and Privilege Escalation Issues | Slither, SWC-105 |
| 03 | VulnInteger Overflow / Underflow (Legacy vs SafeMath) | Solidity 0.8+ analysis |
| 04 | VulnUnchecked External Calls and Return Values | SWC-104 patterns |
| 05 | Vulntx.origin Authentication Anti-Pattern | SWC-115 examples |
| 06 | VulnTimestamp Dependence and Miner Manipulation | SWC-116 |
| 07 | VulnFront-Running / Transaction Ordering Dependence | SWC-114 concepts |
| 08 | VulnDenial of Service via Unexpected Revert | Gas / loop patterns |
| 09 | VulnUninitialized Storage Pointers | Legacy Solidity issues |
| 10 | VulnDelegatecall Injection and Proxy Risks | Proxy pattern analysis |
| 11 | VulnOracle Manipulation Awareness | Price feed risks |
| 12 | VulnFlash Loan Attack Pattern Study | Case study analysis |
| 13 | VulnSignature Replay and Nonce Handling | ECDSA patterns |
| 14 | VulnSWC Registry Taxonomy Mapping Project | SWC catalogue |
| 15 | VulnVulnerability Classification Report Generator | Structured reports |
| 🔍 Static Analysis · Slither · Mythril | ||
| 16 | StatSlither Detector Suite on Sample Contracts | Slither, SmartBugs |
| 17 | StatCustom Slither Detector for a Specific Pattern | Slither plugin API |
| 18 | StatMythril Symbolic Execution Overview | Mythril analysis |
| 19 | StatComparison of Slither vs Mythril Findings | Same contracts, dual tools |
| 20 | StatFalse Positive Analysis of Static Detectors | Manual triage |
| 21 | StatControl Flow Graph Extraction and Visualisation | Slither CFG |
| 22 | StatData Flow Analysis for Tainted Inputs | Static taint concepts |
| 23 | StatGas Cost Estimation from Static Analysis | Gas patterns |
| 24 | StatInheritance and Call Graph Security Review | Slither inheritance |
| 25 | StatAutomated Report Generation from Slither JSON | JSON → Markdown |
| 26 | StatBatch Analysis of Open-Source Contract Sets | SmartBugs corpus |
| 27 | StatStatic Analysis Pipeline in CI (Foundry/Hardhat) | CI integration |
| 🎲 Fuzzing · Property Testing · Echidna | ||
| 28 | FuzzEchidna Property-Based Fuzzing Setup | Echidna, Foundry |
| 29 | FuzzWriting Invariants for Token Contracts | Property specs |
| 30 | FuzzFoundry Fuzz Testing for Solidity Functions | forge test --fuzz |
| 31 | FuzzCoverage-Guided Fuzzing Effectiveness Study | Coverage metrics |
| 32 | FuzzInvariant Testing for DeFi-Style Logic | Balance invariants |
| 33 | FuzzComparison of Echidna vs Foundry Fuzz | Same properties |
| 34 | FuzzCorpus Generation for Smart Contract Fuzzing | Seed inputs |
| 35 | FuzzDetecting Assertion Failures via Fuzzing | Assert-based tests |
| 36 | FuzzGas-Aware Fuzzing Strategies | Gas limit exploration |
| 37 | FuzzStateful Fuzzing Across Multiple Transactions | Sequence fuzzing |
| 38 | FuzzFuzzing Campaign Report and Bug Triage | Result analysis |
| 📐 Formal Methods · Verification Concepts | ||
| 39 | FormFormal Specification of Simple Contract Properties | Spec language concepts |
| 40 | FormModel Checking Awareness for Smart Contracts | Literature overview |
| 41 | FormSymbolic Execution Path Exploration Study | Mythril / concepts |
| 42 | FormInvariant Proof Sketch for Token Supply | Manual proof outline |
| 43 | FormComparison of Testing vs Formal Approaches | Trade-off report |
| 44 | FormCertora / Similar Tool Awareness Survey | Tool landscape |
| 45 | FormBounded Model Checking for Small Contracts | Bounded verification |
| 46 | FormProperty Language Design for Student Labs | DSL sketch |
| 📋 Audit Methodology · Reporting | ||
| 47 | AudStructured Smart Contract Audit Checklist | Checklist design |
| 48 | AudSeverity Classification (Critical / High / Medium) | Rating rubric |
| 49 | AudWriting Clear Vulnerability Findings | Report templates |
| 50 | AudRemediation Recommendation Best Practices | Fix guidance |
| 51 | AudDiff Review of Patched Contracts | Before/after analysis |
| 52 | AudMulti-Tool Audit Workflow Design | Slither + Echidna + manual |
| 53 | AudTime-Boxed Audit Simulation Exercise | Scoped review |
| 54 | AudPublic Audit Report Analysis (Case Studies) | Published reports |
| 55 | AudAutomated Finding Deduplication | Report post-processing |
| 56 | AudStudent Audit Portfolio Template | Portfolio structure |
| 🏭 Applications · Tooling · Research | ||
| 57 | AppERC-20 Security Checklist Implementation | Token security rules |
| 58 | AppUpgradeable Proxy Security Review Guide | Proxy patterns |
| 59 | AppDeFi Protocol Security Awareness Report | Common DeFi risks |
| 60 | AppCI Pipeline for Continuous Contract Analysis | GitHub Actions style |
| 61 | AppWeb Dashboard for Static Analysis Results | Report visualisation |
| 62 | AppSmartBugs Dataset Benchmark Reproduction | SmartBugs corpus |
| 63 | AppComparison of Open-Source Analysis Tools | Feature matrix |
| 64 | AppGas Optimisation vs Security Trade-offs | Pattern study |
| 65 | EvalDetection Rate Metrics on Known Vulnerable Sets | True/false positive rates |
| 66 | EvalReproducible Security Experiment Package | Configs, scripts |
| 67 | ResearchSurvey of Smart Contract Vulnerability Taxonomies | SWC, literature |
| 68 | ResearchHistorical Exploit Case Studies (DAO, etc.) | Post-mortem analysis |
| 69 | ResearchEducational Lab: Write → Analyse → Fuzz → Report | Student starter kit |
| 70 | ResearchCommon Pitfalls in Student Security Projects | Checklist design |
| 71 | ResearchSecure Development Lifecycle for Contracts | SDLC adaptation |
| 72 | ResearchStudent Portfolio: Findings + Fixes + Metrics | Figure pipeline |
| 73 | ResearchThesis Package: Threat Model → Tools → Evaluate | Full documentation |
| 74 | ResearchMachine Learning for Vulnerability Prediction | Code embedding concepts |
| 75 | ResearchCross-Chain / Bridge Security Awareness | Bridge risk survey |
| 76 | ResearchFormal vs Heuristic Detection Coverage Study | Coverage comparison |
| 77 | ResearchResponsible Disclosure of Contract Bugs | Disclosure guidelines |
| 78 | ResearchTooling Ecosystem Evolution for Solidity Security | Timeline survey |
| 79 | ResearchSecure Coding Guidelines for Student Contracts | Style guide |
| 80 | ResearchIntegration of Security into Foundry/Hardhat Workflows | Dev workflow design |
| 81 | ResearchBenchmarking Analysis Tools on SmartBugs | Detection rates |
| 82 | ResearchEnd-to-End Capstone: Vulnerable Contract → Full Audit | Complete project arc |
Topics use Slither, Echidna, Foundry, Hardhat, Solidity and datasets SmartBugs, SWC registry examples. Contact us for reference material, analysis code, evaluation metrics, university-format report, PPT and viva Q&A for any topic above.
Why Choose Us for Smart Contract Security Projects?
Bangalore-based guidance for BE, BTech and MTech students working on vulnerability detection, static analysis, fuzzing and audits.
Vulnerability Classes
Reentrancy, access control, overflow, oracle and flash-loan patterns with SWC mapping.
Static Analysis
Slither detectors, Mythril concepts, CFG analysis and CI integration.
Fuzzing
Echidna properties, Foundry fuzz tests and invariant-based detection.
Audit Methodology
Checklists, severity ratings, remediation guidance and structured reports.
Frequently Asked Questions — Smart Contract Security
Top topics include reentrancy detection, access control issues, static analysis with Slither, fuzzing with Echidna, integer overflow patterns, oracle/flash-loan awareness and structured audit report methodologies.
Slither, Mythril, Echidna, Foundry, Hardhat, Solidity; datasets SmartBugs, SWC registry examples and public vulnerable contract collections.
Yes. Packages include reference material, analysis/fuzzing code, evaluation metrics, vulnerability notes, university-format report, PPT and viva Q&A.
Reentrancy occurs when an external call allows the callee to call back into the original contract before state updates complete, potentially draining funds. Classic examples include the DAO attack pattern; mitigations include checks-effects-interactions and reentrancy guards.
Smart Contract Security Lab — Bangalore
Vulnerability detection, static analysis, fuzzing and audit support for BE, BTech and MTech projects.
Reentrancy
& Access Control
Vulnerabilities& Access Control
Slither
Static Analysis
DetectorsStatic Analysis
Echidna / Foundry
Fuzzing
PropertiesFuzzing
SWC Registry
Taxonomy
ClassificationTaxonomy
Audit Checklist
& Reports
Methodology& Reports
SmartBugs
Benchmarks
EvaluationBenchmarks
CI Security
Pipelines
AutomationPipelines
Viva & Report
Preparation
DocumentationPreparation