[PROPOSAL] Introduction to Smart Contract Auditing

[natachigram]

• Content is:
  [x] Coding tutorial
  Step by step solidity smart contract auditing tutorial
  [x] Informational content
  Explaining security mistakes made by smart contract developers and giving best practices on smart contract auditing techniques and tools.
  [ ] Other (describe)

• Which blockchain protocol is this about?:
  Ethereum

• Description (two or three phrases describing what is it about):
  the content includes:

1. what is smart contract auditing
2. Common security mistakes made by smart contract developers when writing when smart contracts
3. How to audit a smart contracts
4. Auditing tools and best practices

• Have you published articles in a blog before? If so, please include some links below 👇
  link 1
  link 2
  link 3

[Genesis3800]

Hey @natachigram ,
Your linked blogs are cool, and we might be on board to add content on web3 security on our blog.
But before I can take this up internally, I would need the proposal to be more detailed.

Specifically, what web3 security tools would you use?
What attack vectors will be covered?
Will you include code examples? If so, in which framework(Hardhat/Truffle/Foundry).

[natachigram]

hello @Genesis3800 ,
Thanks for your interest in adding web3 security content to your blog. I am excited to work with you on this project.

As discussed, I plan to use the web3 security tool Slither to cover the attack vector of Reentrancy. I will also be including code examples in the Hardhat framework to provide a hands-on approach to understanding and implementing web3 security measures.

Please let me know if there are any other specific areas of web3 security you would like me to focus on or if you have any further questions. I look forward to working with you on this project.

[Genesis3800]

Hey @natachigram ,
We really like this proposal,
I have a few more details I would like to iron out before giving this the go-ahead.
Can we jump on a call sometime at your convenience?

[natachigram]

Yes we can jump on a call
here is a link to schedule a call: https://calendly.com/natachigram/30min

[Genesis3800]

See you on Monday @natachigram :)

[natachigram]

Great, looking forward to talking then.

[natachigram]

Hey @Genesis3800

Introduction to Smart Contract Auditing

This project will provide an overview of smart contract auditing, with a focus on manual auditing techniques. It will also cover the reasons why auditing is important, as well as providing examples of common attack vectors. Finally, it will include code examples and snippets to help demonstrate how to use tools like Slither in auditing contracts, as well as how to test and report on identified issues.

• What is Smart Contract Auditing?
  • Types of Auditing
  • Manual Auditing and Automated Auditing
• Why the Need to Audit Smart Contracts?
• Slither
  • What is Slither?
  • How to Use Slither in Auditing Contracts
• Common Attack Vectors
  • Reentrancy, Replay Attack, Over and Underflows
  • Identifying Them
  • Testing/Unit Testing (POC) Using Foundry
• Finally, Reporting

[Genesis3800]

Thank you @natachigram .
Looking forward to seeing your first draft.

[natachigram]

definitely yeah @Genesis3800

[natachigram]

hey @Genesis3800
Just wanted to give you a quick update - the first draft is ready and I've sent you an invite to the private repo so you can take a look. If you have any questions or want to chat more about the draft, feel free to schedule a call with me!
https://calendly.com/natachigram/30min

[Genesis3800]

Hey @natachigram , I briefly looked at the repo. It looks great.
Please make a PR according to the instructions dev hub's README. We'll work forward from that.

[natachigram]

Hey @Genesis3800
I just made a PR according to the instructions dev hub's README.

[natachigram]

Hey @Genesis3800
Any update on the draft i submitted?

[Genesis3800]

Hey @natachigram

I apologize for the delay from my end.
I took a look at your draft the day you made the PR and it looks good.
I have however been unwell and out of work for a while, so haven't had the chance to leave a full review.
Please wait for a couple more days. I'll prioritize the PR and try to get this through the finish line ASAP.