Author:LoRexxar @Knownsec 404 Team
Translator: Liujx & Liufang & LoRexxar @Knownsec 404 Team
Time:2018.11.12
In the Ethereum contract audit checkList, I divided the problems encountered in the Ethereum contract audit into five major categories, including coding specification problems, design defect problems, coding security problems, coding design problems, and coding problems. It covers more than 29 issues that will arise during the Ethereum Smart Contract audit process. Help smart contract developers and security workers get started quickly with smart contract security.
This CheckList refers to and complies with the research results of the major blockchain security research teams in the completion process. If there are imperfections/errors in the CheckList, you are welcome to submit the issue.
Ethereum Smart Contract Audit CheckList
Ethereum Smart Contract Audit CheckList(PDF)
在以太坊合约审计checkList中,我将以太坊合约审计中遇到的问题分为5大种,包括编码规范问题、设计缺陷问题、编码安全问题、编码设计问题、编码问题隐患。其中涵盖了超过29种会出现以太坊智能合约审计过程中遇到的问题。帮助智能合约的开发者和安全工作者快速入门智能合约安全。
本CheckList在完成过程中参考并整理兼容了各大区块链安全研究团队的研究成果,CheckList中如有不完善/错误的地方也欢迎大家提issue.
感谢
- @王二#johnwick.io
- @郭文生|成都链安科
- @程君@创世安全
- @余弦 | 慢雾
- 404的小伙伴
在CheckList完善过程中提出的意见