LogoLogo
Ctrlk
GitBook Assistant
GitBook Assistant
Thinking...
GitBook Assistant
Good afternoon

I'm here to help you with the docs.

Ctrli
AI Based on your context
  • 🔐The Complete Guide to Securing Web3 Projects
  • Design
  • Coding
    • Code Conservatism: Less is More
    • Use a Spell Checker
    • Use an Up-To-Date Compiler Version
    • Security-Driven Development
    • Define a Security-Oriented CI Environment
    • Prefer Unstructured Storage for Upgradeable Contracts
    • Avoid Vendoring Dependencies
    • Use a Plugin for Safe Upgrades
    • Use Reentrancy Guards
    • Revert/Return Early
    • Revert vs Return
    • Avoid Unlimited ERC-20 Approvals
    • Use the Safe ERC-20 Library
    • Beware of "NFT Front Running" in ERC-721 Tokenization
    • Rounding in Favor of the Protocol with Integer Division in Solidity
    • Use the SafeCast Library
    • Use Cryptographic Libraries
    • Consider Non-Sequential Nonces for Digital Signatures
    • Prefer to Avoid Low-Level Calls
    • Use abi.encodeCall for Low Level Calls
    • Careful Vetting of Unchecked Blocks
    • Avoid Arbitrary Low-Level External Calls
    • Follow the EIP-712 Standard for Digital Signatures
    • Vetting Process for External Tokens
    • Ensure Code Dependencies Are Secured
  • Testing
  • Pre-Deployment
  • Deployment
  • Ongoing Upgrades
  • Ongoing Operations
  • Emergency Response
Powered by GitBook
On this page

Coding

Code Conservatism: Less is MoreUse a Spell CheckerUse an Up-To-Date Compiler VersionSecurity-Driven DevelopmentDefine a Security-Oriented CI EnvironmentPrefer Unstructured Storage for Upgradeable ContractsAvoid Vendoring DependenciesUse a Plugin for Safe UpgradesUse Reentrancy GuardsRevert/Return EarlyRevert vs ReturnAvoid Unlimited ERC-20 ApprovalsUse the Safe ERC-20 LibraryBeware of "NFT Front Running" in ERC-721 TokenizationRounding in Favor of the Protocol with Integer Division in SolidityUse the SafeCast LibraryUse Cryptographic LibrariesConsider Non-Sequential Nonces for Digital SignaturesPrefer to Avoid Low-Level CallsUse abi.encodeCall for Low Level CallsCareful Vetting of Unchecked BlocksAvoid Arbitrary Low-Level External CallsFollow the EIP-712 Standard for Digital SignaturesVetting Process for External TokensEnsure Code Dependencies Are Secured
PreviousGlobal Registry for Project Deployed Smart ContractsNextCode Conservatism: Less is More

Last updated 3 months ago