SUMMARY.md

Summary

Introduction

• Development Guidelines
  • Code Maturity
  • High-Level Best Practices
  • Token Integration Checklist
  • Incident Response Recommendations
  • Secure Development Workflow
• Learn EVM
  • EVM Opcode Reference
  • Transaction Tracing
  • Arithmetic Checks
  • Yellow Paper Guidance:
    • Forks <> EIPs
    • Forks <> CIPs
    • Upgrades <> TIPs
    • Forks <> BEPs
• Not so smart contracts
  • Algorand
    • Rekeying
    • Unchecked Transaction Fees
    • Closing Account
    • Closing Asset
    • Group Size Check
    • Time-Based Replay Attack
    • Access Controls
    • Asset ID Check
    • Denial of Service
    • Inner Transaction Fee
    • Clear State Transaction Check
  • Cairo
    • Improper Access Controls
    • Integer Division Errors
    • View State Modifications
    • Arithmetic Overflow
    • Signature Replays
    • L1 to L2 Address Conversion
    • Incorrect Felt Comparison
    • Namespace Storage Var Collision
    • Dangerous Public Imports in Libraries
  • Cosmos
    • Incorrect Signers
    • Non-Determinism
    • Not Prioritized Messages
    • Slow ABCI Methods
    • ABCI Methods Panic
    • Broken Bookkeeping
    • Rounding Errors
    • Unregistered Message Handler
    • Missing Error Handler
  • Solana
    • Arbitrary CPI
    • Improper PDA Validation
    • Ownership Check
    • Signer Check
    • Sysvar Account Check
  • Substrate
    • Arithmetic Overflow
    • Don't Panic!
    • Weights and Fees
    • Verify First
    • Unsigned Transaction Validation
    • Bad Randomness
    • Bad Origin
• Program Analysis
  • Echidna
    • Introduction
      • Installation
      • Introduction to Fuzzing
      • How to Test a Property
    • Basic
      • How to select the most suitable testing mode
      • How to select the best testing approach
      • How to filter functions
      • How to test assertions
      • How to write good properties step by step
      • How to write properties that use ether
    • Advanced
      • How to collect a corpus
      • How to use optimization mode
      • How to detect high gas consumption
      • How to perform smart contract fuzzing at a large scale
      • How to test bytecode-only contracts
      • How and when to use cheat codes
      • How to use hevm cheats to test permit
      • How to seed Echidna with unit tests
      • Understanding and using allContracts
      • How to fuzz contracts with external libraries
      • Interacting with off-chain data via FFI cheatcode
    • Fuzzing tips
    • Frequently Asked Questions
    • Exercises
      • Exercise 1
      • Exercise 2
      • Exercise 3
      • Exercise 4
      • Exercise 5
      • Exercise 6
      • Exercise 7
      • Exercise 8
  • Manticore
    • Introduction to symbolic execution:
    • Running under Manticore
    • Getting throwing paths
    • Adding constraints
    • Exercises
      • Example
      • Exercise 1
      • Exercise 2
  • Slither
    • Static Analysis
    • API
    • Exercise 1
    • Exercise 2
• Resources