SmartContracts-audit-checklist

A checklist of things to look for when auditing Solidity smart contracts.

GitHub

724 stars
12 watching
121 forks
last commit: about 1 year ago
Linked from 1 awesome list

auditawesomeawesome-listethereumhacktoberfesthacktoberfest-acceptedsecuritysmart-contractssolidityweb3

SmartContracts-audit-checklist / General Review Approach:

? All functions are except where explictly required to be / . [ ]
? 24,807 3 days ago Using the OpenZeppelin safe math library [ ]
? Protected from reentry attacks (A calling B calling A). [ ]
? 12,841 12 days ago Properly implements the ERC20 interface [ ]
? Imported libraries have been previously audited and don't contain dyanmic parts that can be swapped out in future versions which can be be used maliciously. [ ]
? Protected from ERC20 short address attack. [ ]
? Does not use anywhere. [ ]

SmartContracts-audit-checklist / Platform

code4rena
HATS.FINANCE
Immunefi
Sherlock
codehawks
hackenproof
bugrap

SmartContracts-audit-checklist / List of Public SmartContracts Audits Reports

Consensys :
Peckshield :
Openzeppelin :
TrailofBits :
Quillhash :
Hacken :
Beosin :
Iosiro :
Oak Security :
G0 group :
Hexens :
Sherlock :
Code4rena :

SmartContracts-audit-checklist / Resources

Solidity Code Metrics By Consensys Diligence 236 3 months ago
The Repository this list was largely sourced from 2,028 over 1 year ago
Blockchain Security Audit List 713 7 days ago
Smart contract best pracitices 7,476 3 months ago
Smart Contract Auditing Heuristics 571 almost 2 years ago
Solidity idiosyncrasies 346 almost 4 years ago
Solidity security considerations
Methodological security review of a smart contract
Decentralized Application Security Project
Semgrep Smart-contracts 630 29 days ago
Ethereum Security Guide 14,746 about 2 years ago
Smart Contract Security Verification Standard
How to become a smart contract auditor | The complete roadmap 2023
Greate Resources by cyfrin | 2023
All ctf poc writen using Foundery | ctf-blockchain) 803 24 days ago

Backlinks from these awesome lists: