homomorphic

smart-contract security

Trace the exploit.
Challenge the finding.

Autonomous security analysis for Solidity, EVM bytecode, and fhEVM. Reentrancy, access, ordering, confidentiality, and other modelled classes are challenged before a finding is reported.

$ curl -fsSL https://homomorphic.sh | sh

Linux x86_64 · no sudo · SHA-256 verified · read the script

Create an account How it works
A graph folding onto a pentagon The blue lower half of an H-shaped graph reflects onto the white upper pentagon. Every edge maps to another edge.
f : G → C5 Fold G along its bar and every edge lands on an edge of the pentagon C5. Structure survives the map: a graph homomorphism.

what we analyse

The issues an analysis looks for.

Calls, access, ordering, confidentiality, and further classes modelled as behaviour.

Reentrancy

Calls that can re-enter a contract, including external calls whose result is never checked.

Access control

Missing authorization, privileged roles, unprotected setup, and reliance on tx.origin.

Ordering

Front-running, transaction ordering, oracle manipulation, and signature replay.

Confidentiality

Encrypted inputs, who is allowed to decrypt them, and values that should never become cleartext.

Dynamic models

Flash loans, governance, proxies, arithmetic, and randomness are modelled as behaviour. New classes join the same way.

analysis targets

One lab for three execution surfaces.

Solidity

Contracts, functions, and calls, including the issues that only show up in source.

EVM

Deployed bytecode, including contracts that ship without source.

fhEVM

Encrypted values, decryption permissions, and confidentiality failures.

get started

Your token connects the CLI to your account.

Create an account and sign in from the CLI. Your dashboard shows your analysis jobs.

$homomorphic login
Open your account