Workshop

on YouTube ↗01h 00m

" summary

Hands-on workshop that walks through an audit workflow: start with a test suite (Foundry example repo provided), run Slither static analysis to catch reentrancy, then use Foundry fuzzing (stateless and stateful/invariant fuzzing) to discover concrete breaking inputs (example found 1265) and provably sequence-dependent bugs; cites 80% machine-unauditable business-logic issues that require manual review. Covers formal verification, AI limits, CI integration and practical checklist for hackathon-ready audits.

AI-written summary · about

" chapters (10)

1. 0:00Security auditing introduction
2. 3:58Workshop prerequisites
3. 8:28Security in web3 development
4. 12:39Audit process basics
5. 25:05Test suites importance
6. 27:49Static analysis tools
7. 34:24Fuzz testing with Foundry
8. 44:02Stateful fuzzing and invariants
9. 53:12Differential testing and formal verification
10. 55:45Q&A

" related talks

• 01h 02mDiscussion - Auditors, Sessions 3 & 4Michael Lewellen, Gonçalo Sá, Mehdi Zerouali, Jan Gorzny, Neville Grech, Anton Permenev, Filipe Casal · DeFi Security Summit 2022
• 01h 10mAuditors' Workshop: What You’ve Wanted to Ask an Auditor, but Were Afraid To AskYosef Levine, John Waters · DevOps Enterprise Summit London 2019
• 17mDiscussion - Protocols, Session 2Emilio Frangella, Nicolás Venturo, Yuchen Lin · DeFi Security Summit 2022
• 11mWelcome to UnsoundUnsound 2022
• 01h 15mMake your programs more reliable with FuzzingMarshall Clow · ACCU Autumn 2019 Belfast
• 58mEnd-to-End Smart Contract AuditPatrick Collins · Constellation: A Chainlink Hackathon
• 26mDifferential Testing with FoundryAnna Carroll · Solidity Summit 2023
• 29mSecurity Audits in Action: Helping Improve Multiple LF Energy ProjectsAmir Montazery · LF Energy Summit Europe 2025