Smart Contract Code Weaknesses and Solutions

Name: Smart Contract Code Weaknesses and Solutions
Rating: 4.3 (28 reviews)

Security of Smart Contract Code

Created byFerda Özdemir Sönmez

Last updated 6/2022

English

What you'll learn

Smart Contract Code Related Security Problems and How To Solve Them
Security Patterns and How They Help To Overcome Security Attacks or Eliminate Vulnerabilities
How To Install and Use Various Tools Including Remix, VeriSol, Oyente, Manticore, Slither, and Helpers Including Docker, and DotNetTool
Various Libraries, Including Open Zeppelin Access Control, Open Zeppelin Utilities/SafeMath, OpenZeppelin Tokens, Chainlink, and Hardhat.
Solidity Language Based Implementations of Problems and Solutions Including Patterns
Solidity Basics
How To Create, Compile, Deploy and Use Deployed Smart Contracts Using Remix

Coding Exercises

This course includes our updated coding exercises so you can practice your skills as you learn.

Course content

3 sections • 48 lectures • 6h 20m total length

Introduction18:56
Explore smart contract security by examining code weaknesses and solutions, focusing on Solidity and EVM, with static and dynamic analysis tools and practical code samples.
Solidity and Remix in a Nutshell29:59
Udemy Reviews2:16

Function Default Visibility6:35
Explore function default visibility in smart contracts, including private, internal, external, and public, and learn how explicit visibility impacts security and gas usage.
Integer Overflow and Underflow7:38
Outdated Compiler Version3:40
Floating Pragma2:36
Unchecked Call Return Value4:25
Identify the unchecked return value weakness in smart contracts and explain how validating the call result with boolean checks on low-level calls prevents attackers from manipulating subsequent logic.
Unprotected Ether Withdrawal12:09
Unprotected SELFDESTRUCT Instruction3:02
Quiz 1
Reentrancy5:41
State Variable Default Visibility2:39
Uninitialized Storage Pointer7:14
Practice 1
Assert Violation6:24
Verisol4:03
Use of Deprecated Solidity Functions3:43
Coding Exercise 1
Delegatecall to Untrusted Callee7:13
Dos with Failed Call5:17
Coding Exercise 2
Oyente17:01
Transaction Order Dependence13:19
Quiz 2
Authorization Through Tx.Origin4:36
Analyze how tx.origin differs from msg.sender and why using tx.origin for authorization creates vulnerabilities, and learn to mitigate with msg.sender checks and smart contract tunnels.
Block Values As a Proxy for Time6:49
MantiCore Dynamic Security Analysis for Smart Contracts14:14
Signature Mallability20:36
Incorrect Constructor Name5:20
Showing State Variables3:15
Weak Sources of Randomness From Chain Attributes13:04
Missing Protection against Signature Replay Attacks4:42
Lack of Proper Signature Verification3:18
Requirement Violation6:39
Write to Arbitrary Storage Location9:57
Incorrect Inheritance Order6:46
Practice 2
Slither18:55
Slither enables vulnerability detection for Solidity smart contracts with high accuracy, integrates with Truffle, and offers printers like call graph and inheritance to visualize dependencies.
Insufficient Gas Griefing6:35
Arbitrary Jump with Function Type Variable7:58
Explore how function type variables enable an arbitrary jump vulnerability when combined with assembly in smart contracts, and learn safe patterns and minimal assembly remediation to prevent abuse.
DoS with Block Gas Limit8:21
Open Zeppelin8:00
Explore Open Zeppelin, a widely used open-source smart contract library of utilities and templates under MIT license. Learn installation, importing contracts, and leveraging audits and defender for secure blockchain apps.
Quiz3
Typographical Error3:18
Open Zeppelin Access Control15:22
Right to Left Override Control Character4:32
Open Zeppelin Common Tokens4:33
Presence of unused variables3:03
Unexpected Ether balance2:59
Hash Collisions With Multiple Variable Length Arguments14:46
Message call with hardcoded gas amount6:43
Code With No Effects3:46
Unencrypted Private Data On-Chain Weakness5:43
Quiz 4

Requirements

Knowledge of Blockchain Basics
Programming Experience in OO Languages
Knowledge on How To Implement Smart Contracts Using SOlidity Would Be Useful but Not Mandatory. For Newbies, Enough Information Is Provided in the Course

Description

This is a course that focuses both on manually scanning the code vulnerabilities, and bugs through focusing on a large set of (around 40) vulnerabilities for smart contracts and also on automatic vulnerability analysis tools. It also includes several lectures which demonstrate and use security-related libraries which are specifically created to improve the security of smart contracts. The selected development language is Solidity. We have a "Solidity and Remix in a Nutshell Lecture" for students who have a background in other development languages but lack smart contract development experience. This would help them to understand the content and to be able to run provided code parts along with various explanations throughout the course dealing with language/platform-specific issues.

The security weaknesses addressed in this course include some popular weaknesses such as Reentrancy but also many others. We visit numerous terms as we explain these problems and related solutions. Whenever we encounter a pattern to solve a problem we explicitly mark this on our slides. We will be looking at code samples which will be provided from the course web site when we discuss the problems and solutions.

Finally, the tools and libraries which used in the course either to introduce new tools/libraries or as helper tools are Remix, Docker, VeriSol, DotNetTool, Oyente, Open Zeppelin Access Control, Open Zeppelin Tokens, Open Zeppelin, Manticore, and Slither.

Who this course is for:

Beginner to Advanced

Smart Contract Code Weaknesses and Solutions

What you'll learn

Explore related topics

Coding Exercises

Course content

Introduction3 lectures • 51min

Weaknesses and Solutions Blended with Smart Contract Security Analysis Tools44 lectures • 5hr 26min

Conclusion1 lecture • 3min

Requirements

Description

Who this course is for: