Can we get a thread of all the random things DeFi builders should do before their contract holds $25M? As in, if you are a person considering putting your money in a DeFi thing and they haven't done this, it's a big red flag?
Show this thread
-
There is a lot of value to audits that I wish more people knew about. PR reviews are a good one. We had an audit of our build & deploy systems which was so enlightening as it educated us & improved our overall security culture way more than fixing a 2-line bug ever could.
While I agree that test coverage is good to strive for, high test coverage has little overlap with the security of code we have reviewed. Defining security properties is where you want to be.https://blog.trailofbits.com/2019/08/08/246-findings-from-our-smart-contract-audits-an-executive-summary/ …
-
-
Good point Dan. I should have specified 100% * proper * test coverage. Testing against incorrect properties it's a disaster waiting to happen, even with 100% test coverage.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.