Smart Contract Tips

IT 🇮🇹 EN 🇬🇧

The real challenge today is not to ride the web3 technology, but rather to write smart contracts that meet the requirements expected by users and do not expose their funds to hackers and scammers. Blockchain and security, it seems obvious but it is not!

last-post

Understanding Runes Protocol: Revolutionizing Bitcoin's Token Ecosystem

The Runes Protocol emerges as a groundbreaking development in the world of Bitcoin, introducing a new fungible token standard that enhances the capabilities of...

last-post

Exploring the Mechanics of Flash Loan Exploits with a Real-World Case Study

Following our previous article on the flash loan attack case study in the Themis protocol, this article will provide an in-depth and hands-on examination...

last-post

Understanding ERC20 Token Approvals and Allowances. Navigating Risks and Best Practices

At the heart of ERC20's innovation are the concepts of token approvals and allowances. This article delves into the mechanics of ERC20 approvals, the...

last-post

Multicall functions in Smart Contracts

In the Ethereum blockchain, a multicall transaction is a way to execute multiple function calls across different smart contracts within a single transaction. This...


Smart contracts on Ethereum are worse than even non-financial commercial code; as of May 2016, Ethereum contracts averaged 100 obvious bugs per 1000 lines of code. For comparison, Microsoft code averages 15 bugs per 1000 lines, NASA code around 0 per 500,000 lines. (Excerpt from chapter 10 of Attack of the 50 Foot Blockchain by David Gerard)

Our sponsors

Thanks to partner companies and the quadratic funding support of the Italian Spaghett.eth community, our site is updated with new content every week. If you would like to join our sponsors please contact us or Buy me a coffee

Our mission

We are here to help you create, verify and improve the security of your smart contracts through a professional and thorough audit.

Best Practices

In the world of dApps and smart contract development, the adoption of coding best practices is critical. Clear and well-documented code writing not only makes it easier to maintain and update applications, but also reduces the risk of errors and vulnerabilities.

Incident analysis and post-mortem

Studying past security incidents is a vital step in improving security practices in dApps. Detailed analysis of attacks and breaches helps to understand the techniques used by attackers and identify vulnerable areas.

Standards: in-depth dive

Security standards play a crucial role in smart contract development. As blockchain technology continues to evolve, it is critical to stay up-to-date on the latest standards and protocols.

Tutorials & Courses

Continuing education and training are key components to maintaining a high level of security in dApps. Numerous tutorials and online courses are available that cover various aspects of smart contract development.

Alert signals and incident feeds

Maintaining an active and informed communication network is essential in the dApps development community. Sharing information, such as security alerts and updates on newly discovered vulnerabilities, helps prevent the spread of attacks.

Premium services from our partners

Working with a network of trusted partners can significantly improve the security of dApps. Through premium services such as professional security audits, expert advice and access to advanced monitoring tools, developers can benefit from enhanced protection.

Contact us

If you would like to write an article or need an a smart contract expert contact us

Send Message