LogoLogo
search
⌘Ctrlk
GitBook Assistant
GitBook Assistant
Working...Thinking...
GitBook Assistant
Good afternoon

I'm here to help you with the docs.

⌘Ctrli
AI Based on your contextquestion-circle
LogoLogo
  • 🔐The Complete Guide to Securing Web3 Projects
  • Design
  • Coding
    • Code Conservatism: Less is More
    • Use a Spell Checker
    • Use an Up-To-Date Compiler Version
    • Security-Driven Development
    • Define a Security-Oriented CI Environment
    • Prefer Unstructured Storage for Upgradeable Contracts
    • Avoid Vendoring Dependencies
    • Use a Plugin for Safe Upgrades
    • Use Reentrancy Guards
    • Revert/Return Early
    • Revert vs Return
    • Avoid Unlimited ERC-20 Approvals
    • Use the Safe ERC-20 Library
    • Beware of "NFT Front Running" in ERC-721 Tokenization
    • Rounding in Favor of the Protocol with Integer Division in Solidity
    • Use the SafeCast Library
    • Use Cryptographic Libraries
    • Consider Non-Sequential Nonces for Digital Signatures
    • Prefer to Avoid Low-Level Calls
    • Use abi.encodeCall for Low Level Calls
    • Careful Vetting of Unchecked Blocks
    • Avoid Arbitrary Low-Level External Calls
    • Follow the EIP-712 Standard for Digital Signatures
    • Vetting Process for External Tokens
    • Ensure Code Dependencies Are Secured
  • Testing
  • Pre-Deployment
  • Deployment
  • Ongoing Upgrades
  • Ongoing Operations
  • Emergency Response
gitbookPowered by GitBook
block-quoteOn this pagechevron-down

Coding

Code Conservatism: Less is Morechevron-rightUse a Spell Checkerchevron-rightUse an Up-To-Date Compiler Versionchevron-rightSecurity-Driven Developmentchevron-rightDefine a Security-Oriented CI Environmentchevron-rightPrefer Unstructured Storage for Upgradeable Contractschevron-rightAvoid Vendoring Dependencieschevron-rightUse a Plugin for Safe Upgradeschevron-rightUse Reentrancy Guardschevron-rightRevert/Return Earlychevron-rightRevert vs Returnchevron-rightAvoid Unlimited ERC-20 Approvalschevron-rightUse the Safe ERC-20 Librarychevron-rightBeware of "NFT Front Running" in ERC-721 Tokenizationchevron-rightRounding in Favor of the Protocol with Integer Division in Soliditychevron-rightUse the SafeCast Librarychevron-rightUse Cryptographic Librarieschevron-rightConsider Non-Sequential Nonces for Digital Signatureschevron-rightPrefer to Avoid Low-Level Callschevron-rightUse abi.encodeCall for Low Level Callschevron-rightCareful Vetting of Unchecked Blockschevron-rightAvoid Arbitrary Low-Level External Callschevron-rightFollow the EIP-712 Standard for Digital Signatureschevron-rightVetting Process for External Tokenschevron-rightEnsure Code Dependencies Are Securedchevron-right
PreviousGlobal Registry for Project Deployed Smart Contractschevron-leftNextCode Conservatism: Less is Morechevron-right

Last updated 6 months ago