New Ethereum talks, every Monday. The week's conference uploads by event, in your inbox.

Loading player…

Students Share Their Experience With Smart Contract Security Class Week 13

Web3BridgeWed, Oct 9, 2024, 12:00 AM

Explore insights as students share their experiences with their smart contract security classes. Gain valuable perspectives on the challenges, learnings, and best practices encountered in understanding and implementing security measures in smart contracts. Whether you're a student or a blockchain enthusiast, join the student's discussion as they shed light on the importance of security in smart contract development. 📚💻🔐 Here are the links to the platforms mentioned; Nodeguardians → https://nodeguardians.io/ Ethernaut → https://ethernaut.openzeppelin.com/ Solodit → https://solodit.xyz/ Code4rena → https://code4rena.com/ Music by Roman Senyk from Pixabay

Transcript

[Music] web 3 Bridge cohort 9 sponsored by Bas here at Bridge with the introduced smart contract security and a mentor went for that to show different platforms to improve our knowledge of smart contract security we at Sol where you like various reports of different are comped to to these are all platforms to actually Advance your smart C security um knowledge we also in to some platform like code Arena and all these um security smart C security F actually smart developers to improve and their knowledge in fart contract security G optimization is basically a way to reduce the amount of gas we use um we of gas we can use our smart function so one of them is bying access to storage if you can actually store a state variable in your function by catching it to like a memory instead of like um accessing the storage or from Storage back and forth over and over can memory memory variable you can also pack State you can also pack um variables in slots instead of using a un one to I it to to8 or un as well if you see that oh this particular this particular value necessarily pass unit one to and this are downside because the evm has to unpack unpack and that also requires um gas so you shouldn't pack variables loely so most of the time for you variables if the VES to be accessed together most of time to in slot we fact that if I in terms of Errors costom errors cause cheaper gas than using normal requ statement with strs so if you WR your C error St at the that when you have to call an external calls should be cashed that is when you need to call in multiple times it's better you just Cas get once and every time you reference it back you are not going to just for the first time that it was C we also looked at different vulnerabilities smart contracts can have then we have c c to vulnerabilities theing that a particular contract into another contract and execute a function function ised other function geted as well in the contract the can be overcome by you making a state change before making an external call you can actually update your state your state change before you do the transfer of something and um it is also advised not to store sensitive data on the blockchain in you may say that something you like a private variable or private disability this does not mean that your your the the storage canot be accessed the value that accessed by just dat by using assembly ORS we also ail where um we we asked to check for when a smart contract has zero Cod I mean that was a bit difficult I was not like I have that PRI so when we at the the construction time the the contract Z and I'm actually so grateful to our Mentor Miss she has been so so good in our development Journey SM development Journey it's been so great thank you to three thank you bye web 3 Bridge cohort 9 sponsored by BAS [Music]

Automatic transcript — names and jargon may be misspelled.