Decompile any EVM contract. Then read what it really does.

evmdec turns deployed bytecode (fetched by address on any EVM chain) or freshly compiled bytecode into structured pseudo-Solidity: recovered functions with selectors, parameters and mutability, storage layout, events, internal functions, revert reasons. It then runs a security analysis — reentrancy, unchecked calls, delegatecall and selfdestruct exposure, missing access control, proxies, weak randomness, unchecked arithmetic on old compilers — and reports findings with evidence.

Paste the creation or runtime bytecode of a contract you are about to deploy to review it the way an attacker would see it, or an address to inspect what is live on-chain. Proxies are followed to their implementation.

Everything is written from scratch in Rust and verified: every basic block's lifted semantics are checked against a concrete EVM interpreter on random inputs. See the README for the measured numbers.