Git-Mirrors/blockchains-security-toolkit
1
0
Fork 0
mirror of https://github.com/autistic-symposium/blockchains-security-toolkit.git synced 2025-07-02 18:36:51 -04:00
Code Issues Projects Releases Packages Wiki Activity
blockchains-security-toolkit/advanced_expert/bug_hunting/README.md

537 B
Raw Blame History

bug hunting smart contracts


tl; dr


initial questions

  • list external and public functions.
  • when and where external call happens and what changes.
  • check payable functions.
  • how functions are accessed (permissions by who).
  • follow the flow for transfers.

look for common vulnerabilities

  • reentrancy with flashloans, fallbacks, payables.
  • access control.
  • arithmetic errors.

create an enviroment for testing

  • static analysis
  • fuzzing and poc exploits (use foundry)