PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Curvance: Invariants unleashed

blog.trailofbits.com | blog | #smart-contracts | #fuzzing | #audit | #blockchain | #invariant-testing | #echidna
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits recounts its first dedicated invariant development project: in nine weeks on Curvance it wrote 216 invariants, found 13 critical issues, and upgraded its fuzzing tools.
Published
Collected

Related coverage

blog · hackenproof.com
How to hack everiToken?
An introduction to everiToken, a token-based public chain that replaces smart contracts with 'safe contracts' and BFT-DPOS consensus, plus node setup, API testing, and a node vulnerability.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry
HackenProof and Hack The Box turn blockchain security into a gamified CTF track with weekly challenges and a ten-quest series, giving top performers a path into the bug bounty ecosystem.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a Course for the Blockchain Industry
HackenProof has launched a blockchain-industry course with Hack The Box, the four-million-member ethical hacking platform, aimed at building practical blockchain security skills.
blog · certik.com
Tolk Security Explained: From FunC’s Engineering Pain Points to New Audit Considerations
CertiK contrasts FunC and Tolk in code, showing how typed schemas, auto-serialization, and lazy loading shift TON contract security, and lists residual authorization, replay, and accounting risks.
blog · certik.com
What Are Decentralized Apps (dApps)?
Decentralized apps (dApps) run on blockchain networks like Ethereum, Solana, BSC, SUI, and Avalanche. Learn what dApps are, how they work, examples, and their advantages in Web3.
blog · netspi.com
Ethereum Virtual Machine Internals – Part 2
Part two on EVM internals covers persistent contract Storage: how Solidity types map to 32-byte storage slots, SSTORE and SLOAD semantics, and the gas costs that make storage writes expensive.
Back