defchen/building-secure-contracts

Guidelines and training material to write secure smart contracts

Building Secure Smart Contracts

Follow our guidelines and best practices to write secure smart contracts.

Table of contents:

• Development guidelines
  • Secure development workflow
  • High-level best practices
  • Token integration checklist
• Program analysis: How to use automated tools to secure contracts
  • Slither: a static analyzer avaialable through a CLI and scriptable interface.
  • Echidna: a fuzzer that will check your contract's properties.
  • Manticore: a symbolic execution engine that can prove the correctness properties.
• Learn EVM: EVM technical knowledge
  • EIPs - forks: summarize the EIPs included in each fork

For each tool, this training material will provide:

• a theoretical introduction, a walkthrough of its API, and a set of exercises.
• exercises expected to require ~two hours to practically learn its operation.