Journey into Building Security Tools for Cairo/Starknet Smart Contracts [EthCC6]

Journey into Building Security Tools for Cairo/Starknet Smart Contracts [EthCC6]

Journey into Building Security Tools for Cairo/Starknet Smart Contracts [EthCC6] During this talk, we will explain the challenges we faced the past year while building two open-source security tools: cairo-fuzzer and Thoth, our complete Cairo/StarkNet analysis framework. Direct download: link You will get access of the complete tutorial with source code, cheat sheet and or…

$100,000 in Bug Bounty đź’¸ by learning Smart Contract Auditing from CODE4RENA Reports!

$100,000 in Bug Bounty đź’¸ by learning Smart Contract Auditing from CODE4RENA Reports!

$100,000 in Bug Bounty đź’¸ by learning Smart Contract Auditing from CODE4RENA Reports! How to become an Ethereum/Solidity smart contract auditor? Where to start? How to improve your smart contract auditing process? Which tool to use? The paper analyzed in this video: “Demystifying Exploitable Bugs in Smart Contracts” is a compilation of all the findings…

Fuzzing Solidity/Ethereum Smart Contract using Foundry/Forge – Blockchain Security #5

Fuzzing Solidity/Ethereum Smart Contract using Foundry/Forge – Blockchain Security #5

Fuzzing Solidity/Ethereum Smart Contract using Foundry/Forge – Blockchain Security In this video, I will show the basis of running and customizing Foundry/Forge to fuzz an Ethereum smart contract in Solidity. I will also mention “Invariant testing” implementation in Foundry fuzzing compare to Echidna.https://youtu.be/2bTmB3cwhxs You will get access of the complete tutorial with source code, cheat sheet…

State of the Art of Ethereum Smart Contract Fuzzing in 2022 [EthCC5]

State of the Art of Ethereum Smart Contract Fuzzing in 2022 [EthCC5]

State of the Art of Ethereum Smart Contract Fuzzing in 2022 [EthCC5] Fuzzing is known as one of the most efficient techniques to find bugs in software. Sadly, when dealing with Ethereum smart contracts, the number of fuzzers and documentation available is really limited. During this talk, we will explain why fuzz testing EVM smart…

Solidity/Ethereum Smart Contract Audit using Slither – Blockchain Security #4

Solidity/Ethereum Smart Contract Audit using Slither – Blockchain Security #4

Solidity/Ethereum Smart Contract Audit using SlitherBlockchain Security In this video, I will show how to audit and find vulnerabilities inside an Ethereum smart contract written in Solidity using Slither, one of the best EVM smart contract analysis tools. https://youtu.be/s3FL5caAy5w You will get access of the complete tutorial with source code, cheat sheet and or complete…

Ethereum/EVM Smart Contract Reverse Engineering & Disassembly

Ethereum/EVM Smart Contract Reverse Engineering & Disassembly

Ethereum Smart Contract Reverse Engineering &EVM Disassembly Today I’m showing how EVM disassembly works and how to reconstruct the control flow graph (CFG) of an Ethereum smart contract when you only have access to the bytecode (closed-source). It’s really useful when you’re looking to analyze in-depth a contract at the EVM bytecode level. https://youtu.be/I6VDBvX9Pkw You…

Ethereum Smart Contract Analysis & Solidity Audit using Mythril – Blockchain Security #2

Ethereum Smart Contract Analysis & Solidity Audit using Mythril – Blockchain Security #2

Ethereum Smart Contracts Analysis & Solidity Audit using Mythril Following last week’s video, I will show how to audit and find vulnerability inside an Ethereum smart contracts written in Solidity using Mythril, one of the best EVM smart contracts analysis tools. https://youtu.be/fhOMTYkw8FM NOTES etherstore.sol Running Mythril on `etherstore.sol` You will get access of the complete tutorial…

Fuzzing Ethereum Smart Contract using Echidna – Blockchain Security #1

Fuzzing Ethereum Smart Contract using Echidna – Blockchain Security #1

Fuzzing Ethereum Smart Contract using EchidnaBlockchain Security In this video about Blockchain Security, I will show how to find vulnerability inside an Ethereum smart contract written in Solidity using Echidna, one of the only Ethereum smart contract fuzzer. https://youtu.be/EA8_9x4D3Vk NOTES Get started with echidna: Echidna interface Get started with echidna: Echidna invariants Targeted Solidity Smart…

Reversing Ewasm contract 101 – EthCC 2020

Reversing Ewasm contract 101 – EthCC 2020

Reversing Ewasm smart contracts 101 – EthCC 2020 I just gave a talk/workshop today (03/2020) at EthCC 2020 (Paris – France), about reversing Ewasm (Ethereum flavored WebAssembly) smart contract. In this talk, I briefly introduce WebAssembly concepts , Ewasm ethereum specificity and opcodes/instructions. Secondly, I show how to create Ewasm smart contracts and expose different techniques/tools…