PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Inside EthCC[8]: Becoming a smart contract auditor

blog.trailofbits.com | blog | #web3 | #smart-contract | #career | #audit | #blockchain | #trail-of-bits | #web3-security | #ethcc
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

At EthCC[8], Trail of Bits engineer Nicolas Donboly outlined a path to becoming a smart contract auditor spanning programming fundamentals, blockchain, Web3 security, and continuous practice.
Published
Collected

Related coverage

blog · hackenproof.com
Smart Contract Security in 2026: Risks, Best Practices, and Audits
Top smart contract security risks in 2026, best practices that prevent exploits, and when to audit your contracts. A practical guide for founders and CTOs.
blog · certik.com
Tolk Security Explained: From FunC’s Engineering Pain Points to New Audit Considerations
CertiK contrasts FunC and Tolk in code, showing how typed schemas, auto-serialization, and lazy loading shift TON contract security, and lists residual authorization, replay, and accounting risks.
blog · blog.trailofbits.com
Auditing in the age of (good enough) AI
Trail of Bits explains how agents built tooling and a Lean model for the Miden zkVM audit, finding a flaw enabling Falcon signature forgery and yielding 95 machine-checked proofs.
blog · blog.trailofbits.com
State divergence enables unauthorized access
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · hackenproof.com
Sui Move Smart Contract Security: How Shared Objects Leak and Ownership Breaks
Sui’s VM protects owned objects, not shared ones. See how shared-object, Kiosk, and PTB bugs break protocols, plus a full Sui Move audit checklist.
blog · hackenproof.com
How to secure NFT marketplace: Risks, Vulnerabilities, and Best Practices
An overview of NFT marketplace security: risks from smart contract flaws and weak platform controls to phishing and counterfeits, plus common exploit classes such as reentrancy.
Back