Advanced

Protocol Security & Auditing — Lesson outline

Learn how pros audit.

Developer Advanced
5/8 — Protocol Security & Auditing — Lesson outline

RouteFollow this to avoid missing basics.

Blockchains solve coordination problems, not just financial ones.
— Vitalik Buterin
struct AuditChecklist {
    bool authReviewed;
    bool ceiReviewed;
    bool capsReviewed;
    bool pauseReviewed;
    bool invariantsWritten;
}

Turn the outline into a checklist you can check off in code review. Pair each line with a test or tool run.

Steps
  1. Threat model + list:Entry points.
  2. Run quick static checks:(Slither) to surface low-hanging issues.
  3. Manual review for auth/CEI/caps/pause/events.:Manual review for auth/CEI/caps/pause/events.
  4. Write fuzz/invariant tests for:Accounting and role boundaries.
  5. Patch and re-review; keep:A changelog of fixes.
  6. Produce findings + recommendations:+ proofs via tests.
← Previous section
Next section →