Repo for public materials related to Origin security.
Table of Contents
1. Defi incident reports 1. Security materials 1. Checklists 1. Tools 1. External auditsDefi incident reports
- ReportsSecurity materials
- Solidity security considerations - Trail of Bits curated list - Caveats about ecrecover - 2020 paradigm CTF writeup - How to do a Proper Code ReviewChecklists
- ERC20 token integration checklist - Contract PR checklist - Verbose Contract PR Checklist - Deployment Plan template on notionTools
Testing
Slither
Slither is a static analysis tool for Solidity contracts.How to run it
pip3 install slither-analyzer
cd origin-dollar/contracts
yarn install
yarn run slitherUpdating Slither DB
yarn run slither --triageEchidna
Echidna is a test fuzzer for Solidity contracts.The Echnida tests for the OUSD contracts are under contracts/contract/crytic.
How to run it
On MacOS and Linux, download the latest pre-compiled binaries from here. Untar the files in a directory and add the path where the echidna-test binary was extracted to your shell's PATH.To run the tests:
cd origin-dollar/contracts
yarn run echidnaNote that the tests take about ~30min to run.