SlowMist Team ORG

Knowledge Base 慢雾安全团队知识库

SlowMist's open - sourced guide for Web3 projects. It details security practices across development, release, operation, and incident response, aiming to boost project security.

Smart contract audit skills roadmap for beginners, auditors, engineers, etc.

加密资产追踪手册 Crypto Asset Tracing Handbook

This guide is designed for OpenClaw itself (Agent-facing), not as a traditional human-only hardening checklist.

SlowMist Agent Security Skill: A comprehensive security review framework for AI agents operating in adversarial environments. Core principle: Every external input is untrusted until verified.

Blockchain dark forest selfguard handbook. Master these, master the security of your cryptocurrency.

A comprehensive security checklist for MCP-based AI tools. Built by SlowMist to safeguard LLM plugin ecosystems.

No description.

A guide to EOS smart contract security best practices

EOS bp nodes security checklist（EOS超级节点安全执行指南）

SlowMist Vulnerability Research Advisories

No description.

加密资产安全解决方案 Cryptocurrency Security Solution

Blockchain Threat Intelligence Sharing Platform（区块链威胁情报共享平台）

A demonstration toolkit revealing potential security vulnerabilities in MCP (Model Context Protocol) frameworks through data poisoning, JSON injection, function overriding, and cross-MCP call attacks, exposing AI security issues while providing defense recommendations. For educational and research purposes only.

A comprehensive curated list of available Blockchain Bug Bounty Programs.

No description.

No description.

VeChain core nodes security checklist（唯链核心节点安全执行指南）

Ontology Triones Service Node security checklist（本体北斗共识集群安全执行指南）

No description.

The MistTrack MCP server allows Claude AI to directly access blockchain data provided by the MistTrack API, offering address analysis, risk assessment, transaction tracking, and fund flow visualization capabilities, with support for multi-layer recursive transaction analysis.

This document demonstrates the cryptographic algorithms used in blockchain applications and their risks.

MistTrack Agent Skills

This is a quick introduction to getting started with the zkSnark Groth16 algorithm.

No description.

This article aims to provide auditors with a baseline checklist for auditing account abstraction wallets implemented based on the EIP4337 standard, along with some targeted auditing guidelines.

We use machine learning and graph algorithms to analyze the attributes of TRON addresses with the goal of assisting in the tracking of illicit funds.

misteye security check skills

Go SDK of Malicious Wallet Address Database

This article aims to provide a simple introductory guide to APTOS smart contract auditing for auditors who already have a foundation in auditing smart contracts in other languages.

Crypto AML Vendor Evaluation Checklist & Implementation Guide（Crypto AML 供应商评估 Checklist 与执行指南）

No description.

Analysis of AAVE v2 Protocol and Audit Checklist

This article aims to provide developers with a comprehensive guide on how to conduct effective security audits of smart contracts written in Cairo.

No description.

No description.

A minimal-dependency CLI that scans project and global dependencies across npm, PyPI, Rust, Go, and RubyGems for known malicious packages using the MistEye threat intelligence API. Outputs terminal tables, JSON, or SARIF reports.

No description.

Connecting Real-World Assets: From Protocol Analysis to Security Practices