Git-Mirrors/blockchains-security-toolkit
1
0
Fork 0
mirror of https://github.com/autistic-symposium/blockchains-security-toolkit.git synced 2025-05-30 20:14:31 -04:00
Code Issues Projects Releases Packages Wiki Activity

add bug bounty list

Browse source
This commit is contained in:
dr. mia von steinkirch, phd 2023-02-17 16:25:12 -08:00 • committed by GitHub
parent 6280977c52
commit 7027f61a10
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 38 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

38
bug_hunting/README.md Normal file
View file

@ -0,0 +1,38 @@
## bug hunting smart contracts
<br>
### initial questions
<br>
* list `external` and `public` functions.
* when and where external call happens and what changes.
* check `payable` functions.
* how functions are accessed (permissions by who).
* follow the flow for transfers.
<br>
### look for common vulnerabilities
<br>
* reentrancy with flashloans, fallbacks, payables.
* access control.
* arithmetic errors.
<br>
### create an enviroment for testing
<br>
* static analysis
* fuzzing and poc exploits (use foundry)
<br>
---
### resources