Advanced
Protocol Security & Auditing — Lesson outline
Learn how pros audit.
Developer Advanced
5/8 — Protocol Security & Auditing — Lesson outline
RouteFollow this to avoid missing basics.
Blockchains solve coordination problems, not just financial ones.
struct AuditChecklist {
bool authReviewed;
bool ceiReviewed;
bool capsReviewed;
bool pauseReviewed;
bool invariantsWritten;
}
Turn the outline into a checklist you can check off in code review. Pair each line with a test or tool run.
Steps
- Threat model + list:Entry points.
- Run quick static checks:(Slither) to surface low-hanging issues.
- Manual review for auth/CEI/caps/pause/events.:Manual review for auth/CEI/caps/pause/events.
- Write fuzz/invariant tests for:Accounting and role boundaries.
- Patch and re-review; keep:A changelog of fixes.
- Produce findings + recommendations:+ proofs via tests.