SmartContracts-audit-checklist

awesome listpushed about 3 years ago

A checklist of things to look for when auditing Solidity smart contracts.

AI summary

Smart contract audit checklist

A collection of guidelines and tools to help developers identify potential vulnerabilities in smart contracts written in Solidity.

stars: 736
forks: 125
watching: 12
awesome list: 1
entries: 42

What's in the list

42 links in 4 sections, with live GitHub stats.activeno commit in 2y

General Review Approach:

?
All functions are except where explictly required to be / . [ ]
?
Using the OpenZeppelin safe math library [ ]
25.1Kalmost 2 years
?
Protected from reentry attacks (A calling B calling A). [ ]
?
Properly implements the ERC20 interface [ ]
13Kalmost 2 years
?
Imported libraries have been previously audited and don't contain dyanmic parts that can be swapped out in future versions which can be be used maliciously. [ ]
?
Protected from ERC20 short address attack. [ ]
?
Does not use anywhere. [ ]

Platform

List of Public SmartContracts Audits Reports

Resources

Solidity Code Metrics By Consensys Diligence
246almost 2 years
The Repository this list was largely sourced from
2.1Kover 3 years
Blockchain Security Audit List
727almost 2 years
Smart contract best pracitices
7.5K2 years
Smart Contract Auditing Heuristics
578almost 4 years
Solidity idiosyncrasies
346almost 6 years
Solidity security considerations
Methodological security review of a smart contract
Decentralized Application Security Project
Semgrep Smart-contracts
6432 years
Ethereum Security Guide
14.7K4 years
Smart Contract Security Verification Standard
How to become a smart contract auditor | The complete roadmap 2023
Greate Resources by cyfrin | 2023
All ctf poc writen using Foundery | ctf-blockchain)
862almost 2 years

Featured in 1 awesome list

Each link jumps to the spot where the list mentions SmartContracts-audit-checklist.

arpitingle/library-of-ethereum

More related projects