Opinionated security and code quality standard for Solidity smart contracts. Use it as a repeatable review, validation or hardening pass.

This skill chart is a compilation of the abilities required for SlowMist's security team's smart contract security auditors. It aims to enumerate the essential skills needed for smart contract security audits and inspire team members to adopt a mindset of research, innovation, an. Use it as a repeatable review, validation or hardening pass.

A collection of resources to study Solana smart contract security, auditing, and exploits. Use it as a repeatable review, validation or hardening pass.

This work is licensed under a Creative Commons Attribution 4.0 International License. Use it to ground design choices in named patterns, trade-offs and examples.

While planning the Chaincode Residency, we put considerable effort into finding the best resources and creating a curriculum around Lightning protocol development. You can find all of our published materials on our resources page. Use it to build a structured path from fundamentals to hands-on practice.

Software for the SPDZ, MASCOT, and Overdrive secure multi-party computation protocols. See Programs/Source/ for some example MPC programs, and tutorial.md for a basic tutorial. Use it to navigate the topic and choose relevant methods, papers or tools.

This repository contains some heuristics that can be used when auditing smart contracts to get ideas for vulnerabilities/common pitfalls. The goal of this repository is not to list concrete vulnerabilities (there are already a lot of great resources for that, e.g. prior audit rep. Use it as a repeatable review, validation or hardening pass.

Heimdall is an advanced EVM smart contract toolkit specializing in bytecode analysis and extracting information from unverified contracts. Heimdall is written in Rust and is designed to be fast, modular, and more accurate than other existing tools. Use it to navigate the topic and choose relevant methods, papers or tools.

In this repository you can find semgrep rules that look for patterns of vulnerabilities in smart contracts based on actual DeFi exploits as well as gas optimization rules that can be used as a part of the CI pipeline. The rules are part of the semgrep registry under p/smart-contr. Use it to ground design choices in named patterns, trade-offs and examples.