v0.3.0

0.3.0 - 2023-02-23

This release introduces secure-contracts.com - the website for building-secure-contracts.

Additionally this release adds Solana to not-so-smart-contracts, two advanced tutorials for Echidna (multi-abi and optimisations mode) and several guidelines related to EVM.

Thanks to all our external contributors for this release:

• @bart1e
• @ChmielewskiKamil
• @slendermaan

Added

• Not so smart contracts for Solana by @suryansh-tob, @smoelius and @nop4e71 in #181, #197
• Echidna
  • new tutorial for multi-abi by @glarregay-tob in #188
  • new tutorial for the optimization mode by @ggrieco-tob in #180
• Learn EVM
• Add EVM Opcodes (Learn EVM) by @suryansh-tob in #191
• List of EVM changes for BSC/Celo//TRON by @suryansh-tob in #185 and @montyly in #217
• Recommendations on transaction tracing by @bohendo in #208
• Recommendations on how to read the yellow paper by @bohendo in #208
• Create CODEOWNERS by @montyly in #192
• Create CONTRIBUTING.md by @montyly in #216
• mdbook deployment integration by @damilolaedwards in #215 and @montyly in #218

Changed

• Improvements to the Echidna training
  • Config options by @ChmielewskiKamil in #176
  • docs: fix minor typos by @ChmielewskiKamil in #175
  • echidna: exercise 6: fix incorrect link to solution by @elopez in #186
  • Exercise 5 and 6 names were swapped by @ChmielewskiKamil in #177
  • Update Exercise2 by @ahpaleus in #199
  • docs: typo fix by @ChmielewskiKamil in #195
  • docs: fix broken link by @ChmielewskiKamil in #209
  • Fix broken links in Echidna markdown files by @glarregay-tob in #203
  • docs: fix value boundary by @ChmielewskiKamil in #198
• Install Ganache globally by @ChmielewskiKamil in #190
• Update Not So Cosmos for Miss Error Handler by @slendermaan in #189
• Update README.md by @montyly in #210
• Fix for Slither exercise 1 by @bart1e in #187
• Fix broken links by @montyly in #213
• Add Markdown links check to Github Actions by @ahpaleus in #204

New Contributors

• @slendermaan made their first contribution in #189
• @suryansh-tob made their first contribution in #181
• @ahpaleus made their first contribution in #199
• @smoelius made their first contribution in #197
• @bart1e made their first contribution in #187

Full Changelog: 0.2.0...0.3.0

v0.2.0

0.2.0 - 2022-11-30

Insecure examples (e.g., not-so-smart contracts) are now included for Algorand, Cairo, Cosmos, and Substrate. These sample contracts can be used for developer education, as a reference when performing security reviews, and as a benchmark for security tools. We also added two new exercises and more guidance for using Echidna to find Ethereum smart contract vulnerabilities.

If you want to learn more about Echidna, watch our Fuzzing workshop (see the We’re streamers now announcement)

Thanks to all our external contributors for this release!

• @AlehNat
• @ChmielewskiKamil
• @davidlee1435
• @htadashi
• @lubos-harasta
• @rappie
• @supernovahs
• @tserg

Added

• not-so-smart contracts for Algorand/Cairo/Cosmos/Substrate (through multiple PRs over the past months)
• Upgradeability guidelines (#132)
• Echidna FAQ (#137)
• Slither codebase walkthrough recording (#149)
• Two new exercises for Echidna (#143, #158, #164, #160)
• List of Trail of Bits blog posts (#155)
• Paris fork to the list of EIPs (#169)

Changed

• Refactored exercises 5 and 6 of Echidna (#148)

Fixed

• Typos and minor updates (#134, #135, #142, #138, #151, #153, #166, #167, #168, #170)

v0.1.0

0.1.0 - 2022-08-05

This is the first release of building-secure-contracts. This collaborative repo aims to help smart contracts developers and auditors to build safer contracts by providing best practices and technical knowledge.

The repository contains:

• 4 development guidelines
  • High-level best practices: High-level best-practices for all smart contracts
  • Token integration checklist: What to check when interacting with arbitrary tokens
  • Incident Response Recommendations: Guidelines on how to formulate an incident response plan
  • Secure development workflow: A rough, high-level process to follow while you write code
• 1 list of EIPs included in each Ethereum mainnet fork
• 1 day of technical training on program analysis and tools (Echidna/Slither/Manticore)

We would like to thank all our external contributors:

• agroce
• alphastorm
• davidhq
• enginer
• gregkbarnes
• iskdrews
• Namaskar-1F64F
• paulrberg
• PradhumnaPancholi
• sudo-owen

To explore the repository on this release version, use the 0.1.0 tag.