Guest Speaker - yAudit Block 8: Thinking like an attacker
Dravee, Thinking like an attacker
Dravee's tips
The Three Prompts of Spec Thinking: Yet Another Lens for Smart Contract Auditing
Introduction Smart contract auditing is often described as finding bugs in code (after all, a bug report is the expected output). But many of you may have already realized this: Bugs are rarel...
Tip: Feynman learning strategy in THREE points
Original tweet: https://x.com/BowTiedDravee/status/1873656991262077190
Thread: A Chad's Auditing Journey
Original tweet: https://x.com/BowTiedDravee/status/1873801240083390865 CharlesWang’s tweet: https://x.com/0xCharlesWang/status/1855744930854973784
Tip: Defer State Reachability
The idea is in this tweet: However, a tweet being short, it was a bit confusing: So, a follow-up description was given: Then, an amazing description came from Antonio Viggiano’s ChatGPT pr...
List: 100 Assumptions That Could Lead to Bugs
I’ve been getting questions about assumptions vs invariants, since the following tweet: ChatGPT provided, surprisingly, a good list (not exhaustive by any means of course but the coverage is qui...
Thread: A Layered Threat Modeling-approach during the Survey phase of SQ3R
I just love SQ3R. The principles can be applied again and again in multiple domains. The approach is iterative: You can read a bit more about SQ3R in the following PDF: SQ3R: Effective Reading -...
Audio + Thread: How to find all the bugs in code review
The audio isn’t from me, it’s from the one and only Daniel Von Fange @danielvf who gave an unauthorized secret talk on top of the stairs, Mont des Arts, Brussels. His tweet with the recorded audio...
Vidéo (French): Soliditors - Interview avec Dravee
Dravee, Security Researcher chez Certora
Video: Program Slicing
Original tweet: https://x.com/BowTiedDravee/status/1781564839590084712 Lecture “Program Slicing (Part 1, Introduction)” of “Program Analysis”