CosmWasm Security Spotlight
CosmWasm Security Spotlight is intended to be a series of medium posts about vulnerabilities found in audits of CW smart contracts. It would be a good starting point for anyone looking to get into CW contracts audits or to develop more secure smart contracts.
In addition, some hands-on labs are created so the reader can practice their bug-hunting skills in easy targets. This series is being published in collaboration with Oak Security.
- #1 Unsaved storage changes
- Spot the bug challenge 01-Storewhat?
- #2 Access Controls
- Spot the bug challenge 02-Auth
- #3 Address validation
- Spot the bug challenge 05-Addressing