Practical Secure Programming in Solidity

Name: Practical Secure Programming in Solidity
Rating: 4.4 (15 reviews)

Developing Secure Programming Skills in Solidity

Created byDan Morrill

Last updated 12/2025

English

What you'll learn

Discuss common Solidity Programming Constructs
Recognize Solidity Secure Coding Concerns
Describe Smart Contract Operators
Employ Secure coding practices

Course content

5 sections • 45 lectures • 6h 37m total length

Introduction2:50
The Future of Work - Blockchain Developers World Economic Forum3:10
The World Economic Forum's future of jobs report signals blockchain developers as a high-growth, in-demand field, with robust architecture, security, and Solidity skills driving workforce transformation.

Solidity Secure Programming13:55
What is a "Smart Contract"14:57
Learn how smart contracts run on the Ethereum platform, including gas costs, immutability, and the importance of secure coding with OpenZeppelin libraries.
Solidity Value Types6:57
Solidity Reference Types5:11
Explore Solidity reference types, including fixed and dynamic arrays, structs, and mappings. Learn how push, pop, and length manage data, while mappings store key-value pairs securely.
Solidity Operators Master Sheet0:25
Open Libraries from OpenZeppelin7:49
OpenZeppelin Walk-Through5:03
Remix Walk-Through3:50

OWASP Part 125:52
OWASP Part 221:55
Force Feeding Contracts8:52
Explore force feeding contracts in Solidity: expose vulnerabilities from balance checks and self-destruct, compare good and bad practices, and learn to use a counter to validate the value.
Check Effects Interaction Pattern - Reentrancy9:23
External Calls11:15
Overflow and Underflow5:36
Public on-chain data9:10
Public off-chain data9:02
Oracle Manipulation17:34
Front Running13:54
Private Data Access11:43
Governance Wallet25:09
Real World Example: Raydium Admin Wallet Hack9:43
Real world Raydium admin keys hack demonstrates how stolen keys allowed liquidity pool withdrawals on Solana; emphasizes strong key management, multi-signature safeguards, auditors, and post-attack measures.
Governance Controls16:07
Explore governance controls in Solidity contracts, examining voting mechanisms, emergency updates, multi-signature safeguards, and how on-chain and off-chain data support secure DAO decision making.
Self Destruct7:55
Delegate Call9:19
Explore how delegate call executes another contract’s code in the caller’s runtime context, highlighting security risks, storage layout, and upgradeable patterns such as proxies and libraries.
Collisions8:38
Randomness7:52
Denial of Service (DoS)7:54
tx.origin Phishing2:51
Hiding malicious code10:56
Block timestamp manipulation2:46
Bypass contract size check2:42
Signature Replay11:29
Explore how signature replay and meta transactions enable bundling and off-chain signing to reduce gas, with safeguards like EIP-712 domain separation and nonces.
Fake Tokens7:16

Install Truffle Suite in Linux/Apple1:59
Install Truffle Suite in Windows (includes errors)14:44
VS Code Solidity Plugins3:29
Working with Remix7:04
Work with remix to build, compile, and test Solidity contracts, inspect build info, and review compiler versions and security considerations for practical secure programming.
Working with VS Code6:45
Calling Open Zeppelin Modules3:03
Configure your solidity project to place Open Zeppelin modules in your directory so the compiler can locate them, then debug, compile, run static analysis, and test units before deployment.
Clearing VS Code Open Zeppelin errors3:35
Checking to see if a wallet is blacklisted3:22
Auditing13:31
Auditing strengthens smart contracts by combining manual and automated reviews, producing vulnerability reports with mitigation advice, assessing risk, and ensuring due diligence to third parties.

Requirements

Students should have knowledge of Solidity

Description

Solidity is a purpose-made programming language for Ethereum and Ethereum-like blockchains to deliver smart contract capability. Ethereum is a global computing platform that allows for distributed survivable programs called smart contracts to be used by anyone, anywhere, for any reason. Smart contracts can be used to bridge two different blockchain systems, fulfill shipping and product delivery processes, and pay vendors on the certificated completion of specific tasks.

Smart contracts are quickly becoming a regular business process that eliminates the middle person and allows for the frictionless global transfer of value. And billions of dollars are hacked out of smart contracts every year because of faulty coding practices with Solidity.

This course introduces operators, and basic solidity constructs, then dive deep by example into secure coding practices that can be used to deliver more secure smart contracts. We review some of the most common security issues, such as reentrancy, overflows, underflows, external calls, and other places where flow control of the smart contract can be hijacked.

Finally, we go over linting, QA, and DevOps tools that can help identify issues with code and how to use those tools to fix issues with code security. We also go over where to get secure code libraries for code reuse and other popular open-source systems that will make your smart contract better, safer, and quicker to market. You will work with tools like Foundry, Truffle, Ganache, OpenZeppelin, and others so that you get a practical hands-on demonstration of what is out there that can help you be aware of the security considerations when it comes to smart contracts

Who this course is for:

This course is for anyone who wants to know about secure coding practices in Solidity

Practical Secure Programming in Solidity

What you'll learn

Explore related topics

Course content

Introduction2 lectures • 6min

Solidity Overview8 lectures • 58min

Solidity Secure Coding Practices25 lectures • 4hr 35min

Solidity QA and Testing Tools9 lectures • 58min

Close1 lecture • 1min

Requirements

Description

Who this course is for: