Skip to content

Commit f3068ff

Browse files
authored
Adding Cyfrin offerings
Cyfrin is a smart contract security firm, offering services like private audits, competitive audits, education platform, among others.
1 parent 7d7f240 commit f3068ff

File tree

1 file changed

+9
-1
lines changed
  • src/content/developers/docs/smart-contracts/security

1 file changed

+9
-1
lines changed

src/content/developers/docs/smart-contracts/security/index.md

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -214,7 +214,7 @@ Decentralized governance can be beneficial, especially because it aligns the int
214214

215215
One way of preventing problems related to on-chain governance is to [use a timelock](https://blog.openzeppelin.com/protect-your-users-with-smart-contract-timelocks/). A timelock prevents a smart contract from executing certain actions until a specific amount of time passes. Other strategies include assigning a “voting weight” to each token based on how long it has been locked up for, or measuring the voting power of an address at a historical period (for example, 2-3 blocks in the past) instead of the current block. Both methods reduce the possibility of quickly amassing voting power to swing on-chain votes.
216216

217-
More on [designing secure governance systems](https://blog.openzeppelin.com/smart-contract-security-guidelines-4-strategies-for-safer-governance-systems/) and [different voting mechanisms in DAOs](https://hackernoon.com/governance-is-the-holy-grail-for-daos).
217+
More on [designing secure governance systems](https://blog.openzeppelin.com/smart-contract-security-guidelines-4-strategies-for-safer-governance-systems/), [different voting mechanisms in DAOs](https://hackernoon.com/governance-is-the-holy-grail-for-daos), and [the common DAO attack vectors leveraging DeFi](https://dacian.me/dao-governance-defi-attacks) in the shared links.
218218

219219
### 8. Reduce complexity in code to a minimum {#reduce-code-complexity}
220220

@@ -468,6 +468,8 @@ If you plan on querying an on-chain oracle for asset prices, consider using one
468468

469469
- **[ABI Encoder](https://abi.hashex.org/)** - _A free online service for encoding your Solidity contract functions and constructor arguments._
470470

471+
- **[Aderyn](https://github.com/Cyfrin/aderyn)** - _Solidity Static Analyzer, traversing the Abstract Syntax Trees (AST) to pinpoint suspected vulnerabilities and printing out issues in an easy-to-consume markdown format._
472+
471473
### Tools for monitoring smart contracts {#smart-contract-monitoring-tools}
472474

473475
- **[OpenZeppelin Defender Sentinels](https://docs.openzeppelin.com/defender/v1/sentinel)** - _A tool for automatically monitoring and responding to events, functions, and transaction parameters on your smart contracts._
@@ -490,6 +492,8 @@ If you plan on querying an on-chain oracle for asset prices, consider using one
490492

491493
- **[Trail of Bits](https://www.trailofbits.com/)** - _Cybersecurity company that combines security research with an attacker mentality to reduce risk and fortify code._
492494

495+
- **[Cyfrin](https://cyfrin.io)** - _Web3 security powerhouse, incubating crypto security through products and smart contract auditing services._
496+
493497
- **[PeckShield](https://peckshield.com/)** - _Blockchain security company offering products and services for the security, privacy, and usability of the entire blockchain ecosystem._
494498

495499
- **[QuantStamp](https://quantstamp.com/)** - _Auditing service facilitating the mainstream adoption of blockchain technology through security and risk assessment services._
@@ -506,6 +510,8 @@ If you plan on querying an on-chain oracle for asset prices, consider using one
506510

507511
- **[Code4rena](https://code4rena.com/)** - _Competitive audit platform that incentivizes smart contract security experts to find vulnerabilities and help make web3 more secure._
508512

513+
- **[CodeHawks](https://codehawks.com)** - _Leading competitive smart contract audit marketplace for security researchers and Web3 projects._
514+
509515
### Bug bounty platforms {#bug-bounty-platforms}
510516

511517
- **[Immunefi](https://immunefi.com/)** - _Bug bounty platform for smart contracts and DeFi projects, where security researchers review code, disclose vulnerabilities, get paid, and make crypto safer._
@@ -542,6 +548,8 @@ If you plan on querying an on-chain oracle for asset prices, consider using one
542548

543549
- **[Smart Contract Security Verification Standard](https://github.com/securing/SCSVS)** - _Fourteen-part checklist created to standardize the security of smart contracts for developers, architects, security reviewers and vendors._
544550

551+
- **[Learn Smart Contract Security and Auditing](https://updraft.cyfrin.io/courses/security) - _Ultimate smart contract security and auditing course, created for smart contract developers looking to level up their security best practices and become security researchers._
552+
545553
### Tutorials on smart contract security {#tutorials-on-smart-contract-security}
546554

547555
- [How to write secure smart contracts](/developers/tutorials/secure-development-workflow/)

0 commit comments

Comments
 (0)