Visão Geral
Curso Smart Contract Security Auditor. Aprenda os fundamentos da auditoria de contrato inteligente, identifique várias vulnerabilidades de contrato inteligente e aprenda testes manuais, testes automáticos e avaliação de auditoria de um contrato.
Publico Alvo
- Desenvolvedores
- Investidores
- Empreendedores
- Organizações
- Desenvolvedores de solidez
- Entusiastas de segurança
Pre-Requisitos
- Este Curso Smart Contract Security Auditor, é ideal para quem tem experiência com contratos inteligentes e entende ERC20, Staking, Vesting e NFTs.
- Você deve ter uma compreensão do ecossistema JavaScript e Ethereum.
Materiais
Inglês + Exercícios + Lab Pratico
Conteúdo Programatico
Introduction
- Introduction to Smart Contract Audit
- Importance of Smart Contract Audit
Smart Contract Security Vulnerabilities
- Access Control
- Unencrypted Data
- Overflow Underflow
- Contract Interaction
- Reentrancy Attack
- Denial of Service
- Tx.Origin
- Gas Optimization
- Front Running
- Upgradability
- Race Conditions
- Unintiliazed storage Pointers
- Pull Over push
- Force Sending ethers
- Logical Vulnerabilities
- Emergency Stops
- Check Effects Interaction Patterns
- Flash Loan
- Slippage Exploit
Automated Tests of Smart Contracts and Report Writing
- Slither
- Mythrils
- Property checking with scribble and Mythril
- Intro to Scribble
- How to write basic annotations and type of annotations in scribble
- Smart Contract example showing use of annotation
- Tenderly
- Ways to prevent security vulnerabilities
- Security best practices
- Real life hacks – Exploit Scenario
- Identifying Issue Severity
- How to write a Good Audit Report
Audit Assessment
- Project 1
- Project 2
- Project 3
- Research on Various attacks (Candidate needs to write various attacks)
TENHO INTERESSE