技术方法
基于历史交易重放的任意外部调用漏洞扫描系统：方法与实证
以历史交易重放、调用参数溯源与变异验证检测任意外部调用风险，并分析以太坊与 BSC 的漏洞案例及扫描结果。
Every on-chain action,backed by evidence.
A security and on-chain investigation lab for Web3.
Smart contract audits, attack reconstruction and fund tracing,
with reviewable analysis to support informed decisions.
10:24:171,200 ETH11:03:42800 ETH12:18:09300 ETH12:41:33200 ETH
Events and fund paths
Smart contract security & investigation
Assess contract risks before launch. Understand fund flows after an incident.
Transaction calls and transfer records help explain how funds move between related addresses.Understanding calls and asset movements.
Preparing the analysis view…
You can drag the canvas to explore fund flows, select a node or edge for details, or use View all to see every transfer.
WORKING TOGETHER
Understanding your needs. Shaping the scope together.
Your project background and priorities help shape an audit or investigation that addresses the questions you care about.
A closer look at contract design, permissions and asset risk.
Key privileges, dependencies and asset-related logic provide context for assessing potential risks and their triggers.
Preparing the context
Contract addresses or source, deployment network and version are helpful starting points, along with the business logic you would like reviewed.
Analysis and review
Key calls and permissions are considered alongside execution paths and historical replay results to assess potential risk conditions.
Reviewing the results
Findings, impact boundaries and remediation suggestions are supported by before-and-after execution comparisons and review records.
On-chain recordsExecution replayResult comparisonReviewable evidence
RESEARCH METHOD
A closer understanding of risk through historical replay.
Comparing calls and asset changes under the same historical state helps explore how different inputs may affect execution and potential risk.
Historical replay reflects conditions at that time. Assessing current risk also requires review of permissions, funding sources and actual trigger conditions.
Change the recipient
Replay the transaction
Use the same on-chain state from that moment
Review what changed and why
Fund destinationApprovalsFunding source
Research
View all researchLatest research
Product progress and research directions
Lynx provides transaction analysis and historical replay. Vulnerability detection is being researched, and fund investigation tools are in planning.
Transaction analysis
Lynx- Current focus
Analysis and replay
Inspect calls. Replay and compare results.
- Future direction
Analysis with AI
Exploring natural-language assistance for transaction analysis and simulation, with execution records available for review.
- Longer-term research
Source-level debugging
Planned integration with verified source code to help understand execution failures and costs.
A few things you may find helpful
What information would be helpful for an initial discussion?
For audits, source versions, deployment network and key contracts are useful starting points. For investigations, transaction hashes, timing and known addresses help establish the context. A brief can bring these details and your questions together.
How does Lynx support analysis and review?
Lynx provides execution inspection, fund-flow analysis and historical simulation to help gather evidence. Risk findings are reviewed in the context of the business and transactions.
Where can I learn about future plans?
The research roadmap outlines current work and future directions. AI-assisted analysis, source-level debugging and the tracing and compliance product remain in development or planning.
WORKING WITH WEB3 LABS
Let’s discuss your project or an on-chain event.
A brief outline of your project and questions can provide a useful starting point for discussing an audit or investigation.