Guidelines, best practices, and training material for writing secure smart contracts across multiple blockchain platforms.
Building Secure Smart Contracts is an open-source repository of guidelines, best practices, and training materials for developing secure smart contracts across multiple blockchain platforms. It provides developers with the knowledge and tools needed to identify and prevent common vulnerabilities, covering everything from high-level development workflows to technical EVM details and hands-on exercises with security analysis tools.
Smart contract developers, blockchain security engineers, and auditors who need comprehensive, practical guidance on writing secure code and using automated security tools effectively.
Developers choose this resource because it offers a complete, vendor-neutral educational package from a trusted security firm (Trail of Bits), covering both theoretical best practices and practical tool training across multiple blockchain ecosystems.
Guidelines and training material to write secure smart contracts
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Covers everything from high-level best practices to incident response plans, as outlined in the Development Guidelines section, ensuring a holistic approach to secure development.
Includes real-world vulnerability cases across diverse platforms like Algorand, Solana, and Sui in the Not So Smart Contracts section, providing broad applicability.
Offers practical exercises for tools like Echidna and Slither, with each session designed to take about two hours, as detailed in the Program Analysis section.
Provides in-depth explanations of EVM opcodes and transaction tracing techniques, aiding developers in low-level debugging and optimization, based on the Learn EVM content.
Licensed under AGPLv3, which may require open-sourcing derivative works, posing challenges for commercial or proprietary projects that need more permissive terms.
Primarily emphasizes Trail of Bits' own tools (e.g., Echidna, Slither), limiting coverage of alternative security ecosystems or third-party tools not included in the repository.
As a static educational repository, it lacks real-time assistance, community forums, or updates for emerging vulnerabilities, unlike paid security services or active platforms.