Subject
23 entries
Smart Contracts
Bookmarks
Foundry Template for Solidity Smart Contracts
A production-ready Foundry project template for Solidity smart contract development — opinionated defaults for testing, linting, and CI. Foundry replaced Hardhat as the preferred Solidity toolchain for many developers around 2022.
Town Crier — Authenticated Data Feed for Smart Contracts
Town Crier is an authenticated data feed system for smart contracts that uses Intel SGX trusted execution environments to fetch external data with cryptographic attestation. An early, rigorous oracle design predating Chainlink's dominance.
The Move Prover: A Practical Guide
OtterSec's practical guide to the Move Prover — a formal verification tool for the Move smart contract language used on Sui and Aptos. Covers writing specifications that the prover can check, bridging the gap between formal methods theory and blockchain developer practice.
Finding Bugs Automatically in Smart Contracts with Parameterized Invariants
A 2020 WIP paper from Certora describing a framework of reusable parameterized invariants for automatically finding bugs in smart contracts, with the Certora Prover discovering two real bugs in MakerDAO's Multi-Collateral Dai. The core insight is that the hardest problem in formal verification is specification, and smart contracts are unusually amenable to shared invariants — enabling a community network effect.
DeFi Safety — Protocol Security Reviews
DeFi Safety is a security review and rating service for DeFi protocols, scoring them on code quality, documentation, admin key controls, and testing practices. One of the few systematic attempts to give DeFi users a reliable signal about protocol security posture.
EVM Puzzles: Solutions Walkthrough
Solutions walkthrough for EVM Puzzles — a set of interactive challenges that teach the Ethereum Virtual Machine by requiring you to craft calldata or value that makes specific bytecode sequences succeed. Effective hands-on EVM education for smart contract developers.
Uniswap v2 Core
The Uniswap v2 technical whitepaper describes the core design decisions behind the protocol upgrade: arbitrary ERC20 pairs, a hardened time-weighted average price oracle, flash swaps, and a deactivated protocol fee. Together these make Uniswap v2 the infrastructure layer that DeFi summer was built on.
Ethereum Smart Contract Development in Solidity
Zheng, Gao, Huang, and Guan (Springer 2021) provide a comprehensive textbook on developing Ethereum smart contracts in Solidity, covering the EVM, contract patterns, security vulnerabilities, and real-world DApp development. A practical reference for anyone building on Ethereum.
EVM EIPs and Hard Forks Reference
Trail of Bits' learning resource mapping Ethereum EIPs to the hard forks that introduced them — essential context for auditors and developers who need to know which EVM opcodes and behaviors are available at different protocol versions. Part of the building-secure-contracts curriculum.
Smart Contract Development Topics and Issues
A survey of smart contract development topics and common issues, covering the technical challenges, security vulnerabilities, and tooling landscape for writing and deploying contracts on blockchain platforms. Useful as a structured overview of what goes wrong in smart contract development and why.
Slither-simil: ML-Assisted Smart Contract Audits
Trail of Bits introduces Slither-simil, a tool that uses ML embeddings to find smart contracts similar to a known-vulnerable one — dramatically accelerating audits by surfacing candidate contracts before manual review. An early example of applying ML to the smart contract security problem.
Sec3 Pro Auto Auditor: Automated Solana Security
Sec3 (formerly Soteria) launches their automated smart contract auditor for Solana programs — static analysis for Anchor/native Rust programs targeting common vulnerability classes. One of the first automated security tools built specifically for the Solana/Rust ecosystem.
ScanMyCode: Code Security Scanner
ScanMyCode is a code security scanner with smart contract support — static analysis for Solidity and general code security issues. Likely saved alongside the other smart contract security tools (Slither, Sec3, Quantstamp) as part of an audit tooling survey.
Quantstamp Audits Portfolio
Quantstamp's audit portfolio page showcasing their security work across major protocols including ETH2.0, OpenSea, and MakerDAO. Quantstamp was one of the first institutional smart contract audit firms and helped establish what professional blockchain security work looks like.
Clockwork Finance: Automated Analysis of Economic Security in Smart Contracts
Clockwork Finance Framework (CFF) is a formal verification system for reasoning about economic security in DeFi smart contracts, introducing 'extractable value' (EV) as a rigorous notion. Applied to Uniswap, Sushiswap, and MakerDAO, it automatically discovers $56M/month in MEV-like opportunities.
Smart Contract Vulnerability Detection via Information Graph and Ensemble Learning
Zhang, Wang et al. propose SCVDIE, a smart contract vulnerability detection method combining seven neural networks with information graphs via ensemble learning. By pretraining on an information graph and ensembling diverse architectures, they achieve higher accuracy on small vulnerability datasets than individual models or static analysis tools.
Agatha: Smart Contract for DNN Computation
Agatha is a system for verifiable DNN computation on Ethereum smart contracts, achieving native-speed off-chain inference with only 3% overhead via a graph-based pinpoint protocol. It bridges AI and blockchain by solving the mismatch between neural network computational graphs and the VM-based execution model that existing verification schemes assume.
Agoric: JavaScript Smart Contracts with Object-Capability Security
Agoric is a smart contract platform built on JavaScript with a hardened security model — uses object-capability security to make contracts composable and safe by construction. An unusual approach in a space dominated by Solidity and Rust.
Solana Workbench: Developer Tool for Solana
Solana Workbench is a GUI developer tool for Solana smart contract development — manage local validators, deploy programs, inspect account state, and run transactions without the CLI. A Remix-style IDE for the Solana ecosystem.
Gas Optimizations for the Rest of Us
Miguel Piedrafita's practical guide to Solidity gas optimization — covers storage layout, calldata vs memory, packing structs, unchecked arithmetic, and other EVM-specific tricks that reduce transaction costs. Written for regular developers, not EVM experts.
Huffc: Huff Language Compiler for the EVM
Huff is a low-level assembly language for the Ethereum Virtual Machine — you write at the opcode level with macros and abstractions, giving full control over gas usage. Used for implementing highly gas-optimized smart contracts where Solidity's overhead isn't acceptable.
Ethereum EVM Illustrated
A visual primer on the Ethereum Virtual Machine internals — accounts, transactions, message calls, gas, the stack/memory/storage architecture, and Go-Ethereum source code. The best single-document mental model for how the EVM actually works at the bytecode level.
Foundry: Ethereum Development Toolkit in Rust
Foundry is a blazing-fast Ethereum development toolkit written in Rust — Forge for testing, Cast for chain interaction, Anvil for local node, Chisel for REPL. Tests written in Solidity itself, with fuzzing and invariant testing built in. 2-5x faster than Hardhat.