BAC-L3-SEC-106Blockchain security
Smart contract security
The recurring vulnerability classes, the tools that detect them, and the precise limit of what a tool can prove.
- Level
- L3 — Infrastructure engineer
- Duration
- 4 h
- Track
- Blockchain security
- Maintainer
- Blockchain Security Engineer
Learning objectives
- 01Identify the most frequent vulnerability classes
- 02Use static analysis and fuzzing
- 03State what a tool will never detect
Guided lab
Exploit then fix a series of supplied vulnerable contracts, with proof of each fix.
Independent lab
Write a fuzz test revealing a flaw no static analysis flagged.
Security angle
A business-logic flaw escapes tooling: only human review finds it.
Assessment
Fixed contracts with a regression test for every flaw.