building-secure-contracts
coreth
building-secure-contracts | coreth | |
---|---|---|
10 | 7 | |
2,076 | 171 | |
0.6% | 2.9% | |
8.4 | 9.2 | |
9 days ago | 2 days ago | |
Solidity | Go | |
GNU Affero General Public License v3.0 | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
building-secure-contracts
-
Smart Contract Security Field Guide
I appreciate how organized the Consensys guide is laid out. It's pretty easy to read. Trail of Bits has a similar guide that is a little more in-the-weeds technically. It also covers, what we think is, essential background about certain automated analysis techniques like static analysis and how fuzzers work. Check it out!
https://secure-contracts.com/
- Trail of Bits Building Secure Contracts: Now with support for Cosmos
- Trail of Bits Building Secure Contracts: Now with support for Substrate
- New release of Building-secure-contracts: it introduces not so smart contracts for Algorand/Cairo/Cosmos/Substrate - a set of common vulnerabilities for these chains. The release contains also new training materials for Echidna and new guidelines
- Trail of Bits added Algorand to their "Building Secure Contracts" developer guide
-
Launching your Ethereum dApp on Avalanche
We highly recommend using at least one of them if professional contract security review is not possible. A more comprehensive look into secure development practices can be found here.
-
Smart Contract Exploitation Repository
If you need more reading about building secure smart contracts and auditing workflows, see here: https://github.com/crytic/building-secure-contracts
- Any recommendations for smart contract auditing ?
coreth
-
Subnet-EVM API
Subnet-EVM APIs are identical to Coreth APIs, except Avalanche Specific APIs starting with avax. Subnet-EVM also supports standard Ethereum APIs as well. For more information about Coreth APIs see here.
-
Launching your Ethereum dApp on Avalanche
C-Chain runs a fork of go-ethereum called coreth that has the networking and consensus portions replaced with Avalanche equivalents. What's left is the Ethereum VM, which runs Solidity smart contracts and manages data structures and blocks on the chain. As a result, you get a blockchain that can run all the Solidity smart contracts from Ethereum, but with much greater transaction bandwidth and instant finality that Avalanche's revolutionary consensus enables.
-
What is a Subnet EVM?
Subnet EVM is the Virtual Machine (VM) that defines the Subnet Contract Chains. Subnet EVM is a simplified version of Coreth VM (C-Chain).
- "What is Avalanche?" an Article Written by Meqa Network
-
Opinion: DAGs (Directed Acyclic Graphs) are the future, not Blockchains
I just meant that the Avalanche C-chain is literally based off the Ethereum protocol (see https://github.com/ava-labs/coreth). It's a wrapper around Go Ethereum so that it works with Avalanche's consensus mechanism. Under this wrapper the C-chain still uses a blockchain the way Ethereum does, in contrast with Avalanche's X-chain.
-
it’s about the future
No. C-chain EVM uses portions of geth as a plugin library to handle Solidity stuff, stripping out all the networking, consensus and all other functionality irrelevant to Avalanche. Avalanche node itself is a separate repo, and that is where all the exciting stuff actually happens.
-
And just like that, AVAX holders got shafted.
Source: https://github.com/ava-labs/coreth/pull/114/files#diff-9a870b1572ea65697aea0a8f959e0ee20efa4ff3370c3e39dcc2f3ec436b4fc3R212
What are some alternatives?
eth-security-toolbox - A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.
avalanche-faucet - Avalanche Faucet for Fuji Network and Subnets.
slither - Static Analyzer for Solidity and Vyper
avalanche-network-runner - Tool to run and interact with an Avalanche network locally
pooltogether-community-ui - UI to use when creating your own custom pools, prize strategies or as reference code for integrating your own pools.
subnet-evm - Launch your own EVM as an Avalanche Subnet
avalanchego - Go implementation of an Avalanche node.
mythril - Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Hedera, Quorum, Vechain, Rootstock, Tron and other EVM-compatible blockchains.