tag:github.com,2008:https://github.com/crytic/building-secure-contracts/releases 2023-02-21T16:36:35Z tag:github.com,2008:Repository/233102473/0.3.0 2023-02-23T13:44:14Z <h1>0.3.0 - 2023-02-23</h1> <p>This release introduces <a href="https://secure-contracts.com" rel="nofollow">secure-contracts.com</a> - the website for building-secure-contracts.</p> <p>Additionally this release adds Solana to not-so-smart-contracts, two advanced tutorials for Echidna (multi-abi and optimisations mode) and several guidelines related to EVM.</p> <p>Thanks to all our external contributors for this release:</p> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bart1e/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bart1e">@bart1e</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ChmielewskiKamil/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ChmielewskiKamil">@ChmielewskiKamil</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/slendermaan/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/slendermaan">@slendermaan</a></li> </ul> <h2>Added</h2> <ul> <li>Not so smart contracts for Solana by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/suryansh-tob/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/suryansh-tob">@suryansh-tob</a>, <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/smoelius/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/smoelius">@smoelius</a> and <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/nop4e71/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/nop4e71">@nop4e71</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1499647717" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/181" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/181/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/181">#181</a>, <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1551026669" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/197" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/197/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/197">#197</a></li> <li>Echidna <ul> <li>new tutorial for multi-abi by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/glarregay-tob/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/glarregay-tob">@glarregay-tob</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1514587739" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/188" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/188/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/188">#188</a></li> <li>new tutorial for the optimization mode by @ggrieco-tob in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1497298584" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/180" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/180/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/180">#180</a></li> </ul> </li> <li>Learn EVM</li> <li>Add EVM Opcodes (Learn EVM) by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/suryansh-tob/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/suryansh-tob">@suryansh-tob</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1520050183" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/191" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/191/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/191">#191</a></li> <li>List of EVM changes for BSC/Celo//TRON by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/suryansh-tob/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/suryansh-tob">@suryansh-tob</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1512218688" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/185" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/185/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/185">#185</a> and <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/montyly/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/montyly">@montyly</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1588982416" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/217" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/217/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/217">#217</a></li> <li>Recommendations on transaction tracing by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bohendo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bohendo">@bohendo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1560390079" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/208" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/208/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/208">#208</a></li> <li>Recommendations on how to read the yellow paper by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bohendo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bohendo">@bohendo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1560390079" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/208" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/208/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/208">#208</a></li> <li>Create CODEOWNERS by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/montyly/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/montyly">@montyly</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1520706252" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/192" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/192/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/192">#192</a></li> <li>Create CONTRIBUTING.md by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/montyly/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/montyly">@montyly</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1588936001" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/216" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/216/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/216">#216</a></li> <li>mdbook deployment integration by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/damilolaedwards/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/damilolaedwards">@damilolaedwards</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1587583574" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/215" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/215/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/215">#215</a> and <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/montyly/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/montyly">@montyly</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1593219394" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/218" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/218/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/218">#218</a></li> </ul> <h2>Changed</h2> <ul> <li>Improvements to the Echidna training <ul> <li>Config options by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ChmielewskiKamil/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ChmielewskiKamil">@ChmielewskiKamil</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1482679786" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/176" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/176/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/176">#176</a></li> <li>docs: fix minor typos by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ChmielewskiKamil/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ChmielewskiKamil">@ChmielewskiKamil</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1479454974" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/175" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/175/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/175">#175</a></li> <li>echidna: exercise 6: fix incorrect link to solution by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/elopez/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/elopez">@elopez</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1513038538" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/186" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/186/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/186">#186</a></li> <li>Exercise 5 and 6 names were swapped by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ChmielewskiKamil/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ChmielewskiKamil">@ChmielewskiKamil</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1484408599" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/177" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/177/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/177">#177</a></li> <li>Update Exercise2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ahpaleus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ahpaleus">@ahpaleus</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1554840595" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/199" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/199/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/199">#199</a></li> <li>docs: typo fix by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ChmielewskiKamil/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ChmielewskiKamil">@ChmielewskiKamil</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1549958695" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/195" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/195/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/195">#195</a></li> <li>docs: fix broken link by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ChmielewskiKamil/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ChmielewskiKamil">@ChmielewskiKamil</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1564148369" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/209" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/209/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/209">#209</a></li> <li>Fix broken links in Echidna markdown files by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/glarregay-tob/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/glarregay-tob">@glarregay-tob</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1556613353" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/203" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/203/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/203">#203</a></li> <li>docs: fix value boundary by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ChmielewskiKamil/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ChmielewskiKamil">@ChmielewskiKamil</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1551820281" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/198" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/198/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/198">#198</a></li> </ul> </li> <li>Install Ganache globally by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ChmielewskiKamil/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ChmielewskiKamil">@ChmielewskiKamil</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1517713579" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/190" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/190/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/190">#190</a></li> <li>Update Not So Cosmos for Miss Error Handler by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/slendermaan/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/slendermaan">@slendermaan</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1515165794" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/189" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/189/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/189">#189</a></li> <li>Update README.md by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/montyly/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/montyly">@montyly</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1565854169" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/210" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/210/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/210">#210</a></li> <li>Fix for Slither exercise 1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bart1e/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bart1e">@bart1e</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1513957588" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/187" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/187/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/187">#187</a></li> <li>Fix broken links by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/montyly/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/montyly">@montyly</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1586047694" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/213" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/213/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/213">#213</a></li> <li>Add Markdown links check to Github Actions by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ahpaleus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ahpaleus">@ahpaleus</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1557879274" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/204" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/204/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/204">#204</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/slendermaan/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/slendermaan">@slendermaan</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1515165794" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/189" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/189/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/189">#189</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/suryansh-tob/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/suryansh-tob">@suryansh-tob</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1499647717" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/181" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/181/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/181">#181</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ahpaleus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ahpaleus">@ahpaleus</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1554840595" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/199" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/199/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/199">#199</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/smoelius/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/smoelius">@smoelius</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1551026669" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/197" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/197/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/197">#197</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bart1e/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bart1e">@bart1e</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1513957588" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/187" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/187/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/187">#187</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/crytic/building-secure-contracts/compare/0.2.0...0.3.0"><tt>0.2.0...0.3.0</tt></a></p> montyly tag:github.com,2008:Repository/233102473/0.2.0 2023-01-20T17:41:52Z <h1>0.2.0 - 2022-11-30</h1> <p>Insecure examples (e.g., not-so-smart contracts) are now included for <a href="https://github.com/crytic/building-secure-contracts/tree/master/not-so-smart-contracts/algorand">Algorand</a>, <a href="https://github.com/crytic/building-secure-contracts/tree/master/not-so-smart-contracts/cairo">Cairo</a>, <a href="https://github.com/crytic/building-secure-contracts/tree/master/not-so-smart-contracts/cosmos">Cosmos</a>, and <a href="https://github.com/crytic/building-secure-contracts/tree/master/not-so-smart-contracts/substrate">Substrate</a>. These sample contracts can be used for developer education, as a reference when performing security reviews, and as a benchmark for security tools. We also added two new exercises and more guidance for using Echidna to find Ethereum smart contract vulnerabilities.</p> <p>If you want to learn more about Echidna, watch our <a href="https://www.youtube.com/watch?v=QofNQxW_K08&amp;list=PLciHOL_J7Iwqdja9UH4ZzE8dP1IxtsBXI" rel="nofollow">Fuzzing workshop</a> (see the <a href="https://blog.trailofbits.com/2022/11/14/livestream-workshop-fuzzing-echidna-slither/" rel="nofollow">We’re streamers now</a> announcement)</p> <p>Thanks to all our external contributors for this release!</p> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/AlehNat/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/AlehNat">@AlehNat</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/ChmielewskiKamil/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/ChmielewskiKamil">@ChmielewskiKamil</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/davidlee1435/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/davidlee1435">@davidlee1435</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/htadashi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/htadashi">@htadashi</a></li> <li>@lubos-harasta</li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/rappie/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/rappie">@rappie</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/supernovahs/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/supernovahs">@supernovahs</a></li> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/tserg/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tserg">@tserg</a></li> </ul> <h2>Added</h2> <ul> <li>not-so-smart contracts for Algorand/Cairo/Cosmos/Substrate (through multiple PRs over the past months)</li> <li>Upgradeability guidelines (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1363650080" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/132" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/132/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/132">#132</a>)</li> <li>Echidna FAQ (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1367959230" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/137" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/137/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/137">#137</a>)</li> <li>Slither codebase walkthrough recording (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1407835873" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/149" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/149/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/149">#149</a>)</li> <li>Two new exercises for Echidna (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1387888273" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/143" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/143/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/143">#143</a>, <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1431553598" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/158" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/158/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/158">#158</a>, <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1461381792" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/164" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/164/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/164">#164</a>, <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1438405321" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/160" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/160/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/160">#160</a>)</li> <li>List of Trail of Bits blog posts (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1427238246" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/155" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/155/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/155">#155</a>)</li> <li>Paris fork to the list of EIPs (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1466275378" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/169" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/169/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/169">#169</a>)</li> </ul> <h2>Changed</h2> <ul> <li>Refactored exercises 5 and 6 of Echidna (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1402447758" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/148" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/148/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/148">#148</a>)</li> </ul> <h2>Fixed</h2> <ul> <li>Typos and minor updates (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1366630288" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/134" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/134/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/134">#134</a>, <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1367480798" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/135" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/135/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/135">#135</a>, <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1386038598" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/142" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/142/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/142">#142</a>, <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1380774707" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/138" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/138/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/138">#138</a>, <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1410407387" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/151" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/151/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/151">#151</a>, <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1426275307" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/153" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/153/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/153">#153</a>, <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1461495175" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/166" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/166/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/166">#166</a>, <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1462315539" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/167" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/167/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/167">#167</a>, <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1466052074" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/168" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/168/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/168">#168</a>, <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="1467726541" data-permission-text="Title is private" data-url="https://github.com/crytic/building-secure-contracts/issues/170" data-hovercard-type="pull_request" data-hovercard-url="/crytic/building-secure-contracts/pull/170/hovercard" href="https://github.com/crytic/building-secure-contracts/pull/170">#170</a>)</li> </ul> montyly tag:github.com,2008:Repository/233102473/0.1.0 2022-09-07T17:45:06Z <h1>0.1.0 - 2022-08-05</h1> <p>This is the first release of <code>building-secure-contracts</code>. This collaborative repo aims to help smart contracts developers and auditors to build safer contracts by providing best practices and technical knowledge.</p> <p>The repository contains:</p> <ul> <li>4 development guidelines <ul> <li><code>High-level best practices</code>: High-level best-practices for all smart contracts</li> <li><code>Token integration checklist</code>: What to check when interacting with arbitrary tokens</li> <li><code>Incident Response Recommendations</code>: Guidelines on how to formulate an incident response plan</li> <li><code>Secure development workflow</code>: A rough, high-level process to follow while you write code</li> </ul> </li> <li>1 list of EIPs included in each Ethereum mainnet fork</li> <li>1 day of technical training on program analysis and tools (Echidna/Slither/Manticore)</li> </ul> <p>We would like to thank all our external contributors:</p> <ul> <li><a href="https://github.com/agroce">agroce</a></li> <li><a href="https://github.com/alphastorm">alphastorm</a></li> <li><a href="https://github.com/davidhq">davidhq</a></li> <li><a href="https://github.com/enginer">enginer</a></li> <li><a href="https://github.com/gregkbarnes">gregkbarnes</a></li> <li><a href="https://github.com/iskdrews">iskdrews</a></li> <li><a href="https://github.com/Namaskar-1F64F">Namaskar-1F64F</a></li> <li><a href="https://github.com/paulrberg">paulrberg</a></li> <li><a href="https://github.com/PradhumnaPancholi">PradhumnaPancholi</a></li> <li><a href="https://github.com/sudo-owen">sudo-owen</a></li> </ul> <p>To explore the repository on this release version, use the <a href="https://github.com/crytic/building-secure-contracts/tree/0.1.0">0.1.0</a> tag.</p> montyly