[PROPOSAL] Introduction to Smart Contract Auditing

[natachigram]

• Content is: [x] Coding tutorial Step by step solidity smart contract auditing tutorial [x] Informational content Explaining security mistakes made by smart contract developers and giving best practices on smart contract auditing techniques and tools. [ ] Other (describe)

• Which blockchain protocol is this about?: Ethereum

• Description (two or three phrases describing what is it about): the content includes:

  1. what is smart contract auditing
  2. Common security mistakes made by smart contract developers when writing when smart contracts
  3. How to audit a smart contracts
  4. Auditing tools and best practices

• Have you published articles in a blog before? If so, please include some links below 👇 link 1 link 2 link 3

[Genesis3800]

Hey @natachigram , Your linked blogs are cool, and we might be on board to add content on web3 security on our blog. But before I can take this up internally, I would need the proposal to be more detailed.

Specifically, what web3 security tools would you use? What attack vectors will be covered? Will you include code examples? If so, in which framework(Hardhat/Truffle/Foundry).

[natachigram]

hello @Genesis3800 , Thanks for your interest in adding web3 security content to your blog. I am excited to work with you on this project.

As discussed, I plan to use the web3 security tool Slither to cover the attack vector of Reentrancy. I will also be including code examples in the Hardhat framework to provide a hands-on approach to understanding and implementing web3 security measures.

Please let me know if there are any other specific areas of web3 security you would like me to focus on or if you have any further questions. I look forward to working with you on this project.

[Genesis3800]

Hey @natachigram , We really like this proposal, I have a few more details I would like to iron out before giving this the go-ahead. Can we jump on a call sometime at your convenience?

[natachigram]

Yes we can jump on a call here is a link to schedule a call: https://calendly.com/natachigram/30min

[Genesis3800]

See you on Monday @natachigram :)

[natachigram]

Great, looking forward to talking then.

[natachigram]

Hey @Genesis3800

Introduction to Smart Contract Auditing

This project will provide an overview of smart contract auditing, with a focus on manual auditing techniques. It will also cover the reasons why auditing is important, as well as providing examples of common attack vectors. Finally, it will include code examples and snippets to help demonstrate how to use tools like Slither in auditing contracts, as well as how to test and report on identified issues.

• What is Smart Contract Auditing?
  • Types of Auditing
  • Manual Auditing and Automated Auditing
• Why the Need to Audit Smart Contracts?
• Slither
  • What is Slither?
  • How to Use Slither in Auditing Contracts
• Common Attack Vectors
  • Reentrancy, Replay Attack, Over and Underflows
  • Identifying Them
  • Testing/Unit Testing (POC) Using Foundry
• Finally, Reporting

[Genesis3800]

Thank you @natachigram . Looking forward to seeing your first draft.

[natachigram]

definitely yeah @Genesis3800

[natachigram]

hey @Genesis3800 Just wanted to give you a quick update - the first draft is ready and I've sent you an invite to the private repo so you can take a look. If you have any questions or want to chat more about the draft, feel free to schedule a call with me! https://calendly.com/natachigram/30min

[Genesis3800]

Hey @natachigram , I briefly looked at the repo. It looks great. Please make a PR according to the instructions dev hub's README. We'll work forward from that.

[natachigram]

Hey @Genesis3800 I just made a PR according to the instructions dev hub's README.

[natachigram]

Hey @Genesis3800 Any update on the draft i submitted?

[Genesis3800]

Hey @natachigram

I apologize for the delay from my end. I took a look at your draft the day you made the PR and it looks good. I have however been unwell and out of work for a while, so haven't had the chance to leave a full review. Please wait for a couple more days. I'll prioritize the PR and try to get this through the finish line ASAP.

[natachigram]

Hey @Genesis3800

Thank you for the update, and I'm sorry to hear that you've been unwell. Please don't worry about the delay in reviewing my draft; your health and well-being are much more important. Take all the time you need to recover fully.

In the meantime, please let me know if there's anything I can do to help. I'm happy to provide any additional information or make any necessary changes to the draft.

Again, I wish you a speedy recovery and look forward to hearing from you soon.

[natachigram]

hello @Genesis3800 Hope your health is getting better. Please is there any update on the draft?

[Genesis3800]

Hey @natachigram ,

Thank you I'm doing well. Hope you're doing well too. I submitted reviews to your PR more than 3 weeks ago. In fact, I was about to reach out myself to enquire if everything's ok on your side. It seems you somehow missed it. I tagged you in the PR twice I think. Check out this link pls.

https://github.com/chainstacklabs/developer-hub-content/pull/78

[natachigram]

@Genesis3800 I am sorry i missed that I will look into it. thanks

[natachigram]

hey @Genesis3800 I just pushed the second draft.

[Genesis3800]

Hey @natachigram , Thank you for your contribution to the developer hub. We appreciate having you with us. To move forward, please send me your email address.

I will reach out to you via mail to request your bank details for processing your payment.

[natachigram]

@Genesis3800 Thanks for your message. My email is natachigram@gmail.com