Skip to content

🚧 This Project is a Work In Progress (WIP). 🚧

OWASP Smart Contract Security

🎙 Talks

Initializing search

OWASP/owasp-scs

OWASP Smart Contract Security
SCSVS
Smart Contract Top 10
SCSTG
SCWE
SCS Checklist
News
🎙 Talks
⭐ Contribute
💙 Donate
💬 Connect with Us

OWASP Smart Contract Security

OWASP/owasp-scs

OWASP Smart Contract Security
SCSVS
SCSVS
- Intro
  Intro
- SCSVS-ARCH
  SCSVS-ARCH
  - S1. Architecture, Design, and Threat Modeling
  - Controls
    Controls
    
    SCSVS-ARCH-1
    
    SCSVS-ARCH-2
    
    SCSVS-ARCH-3
- SCSVS-CODE
  SCSVS-CODE
  - S2. Policies, Procedures, and Code Management
  - Controls
    Controls
    
    SCSVS-CODE-1
    
    SCSVS-CODE-2
    
    SCSVS-CODE-3
- SCSVS-GOV
  SCSVS-GOV
  - S3. Business Logic and Economic Security
  - Controls
    Controls
    
    SCSVS-GOV-1
    
    SCSVS-GOV-2
    
    SCSVS-GOV-3
- SCSVS-AUTH
  SCSVS-AUTH
  - S4. Access Control and Authentication
  - Controls
    Controls
    
    SCSVS-AUTH-1
    
    SCSVS-AUTH-2
    
    SCSVS-AUTH-3
- SCSVS-COMM
  SCSVS-COMM
  - S5. Secure Interactions and Communications
  - Controls
    Controls
    
    SCSVS-COMM-1
    
    SCSVS-COMM-2
    
    SCSVS-COMM-3
    
    SCSVS-COMM-4
- SCSVS-CRYPTO
  SCSVS-CRYPTO
  - S6. Cryptographic Practices
  - Controls
    Controls
    
    SCSVS-CRYPTO-1
    
    SCSVS-CRYPTO-2
    
    SCSVS-CRYPTO-3
- SCSVS-ORACLE
  SCSVS-ORACLE
  - S7. Arithmetic and Logic Security
  - Controls
    Controls
    
    SCSVS-ORACLE-1
    
    SCSVS-ORACLE-2
- SCSVS-BLOCK
  SCSVS-BLOCK
  - S8. Denial of Service (DoS)
  - Controls
    Controls
    
    SCSVS-BLOCK-1
    
    SCSVS-BLOCK-2
- SCSVS-BRIDGE
  SCSVS-BRIDGE
  - S9. Blockchain Data and State Management
  - Controls
    Controls
    
    SCSVS-BRIDGE-1
    
    SCSVS-BRIDGE-2
    
    SCSVS-BRIDGE-3
    
    SCSVS-BRIDGE-4
- SCSVS-DEFI
  SCSVS-DEFI
  - S10. Gas Usage, Efficiency, and Limitations
  - Controls
    Controls
    
    SCSVS-DEFI-1
    
    SCSVS-DEFI-2
- SCSVS-COMP
  SCSVS-COMP
  - S11. Component-Specific Security
  - Controls
    Controls
    
    SCSVS-COMP-1
    
    SCSVS-COMP-2
    
    SCSVS-COMP-3
    
    SCSVS-COMP-4
    
    SCSVS-COMP-5
    
    SCSVS-COMP-6
- Appendix
  Appendix
  - Appendix A: Glossary
  - Appendix B: References
Smart Contract Top 10
Smart Contract Top 10
SCSTG
SCSTG
- Intro
  Intro
- General Concepts
  General Concepts
  - Smart Contract Taxonomy
- Tests (Beta)
  Tests (Beta)
  - Solidity
    Solidity
    
    SCSVS-ARCH
    SCSVS-ARCH
    
    Overview
    
    Overview
    
    Tests
    Tests
    
    SCSTG-TEST-0007: Modularity and Upgradability
    
    SCSVS-CODE
    SCSVS-CODE
    
    Overview
    
    Overview
    
    Tests
    Tests
    
    SCSTG-TEST-0010: Test Compiler Version and Deprecated Functions
    
    SCSVS-GOV
    SCSVS-GOV
    
    Overview
    
    Overview
    
    Tests
    Tests
    
    SCSTG-TEST-0015: Testing Business Logic and Economic Security
    
    SCSVS-AUTH
    SCSVS-AUTH
    
    Overview
    
    Overview
    
    Tests
    Tests
    
    SCSTG-TEST-0001: Testing Multi-Signature Schemes
    
    SCSTG-TEST-0002: Identity Verification Test
    
    SCSTG-TEST-0003: Least Privilege Principle Test
    
    SCSTG-TEST-0004: Test Access Control on Critical Functions
    
    SCSTG-TEST-0005: Test Timed Permissions
    
    SCSTG-TEST-0006: Test Access Control Using Merkle Trees
    
    SCSVS-COMM
    SCSVS-COMM
    
    Overview
    
    Overview
    
    Tests
    Tests
    
    SCSTG-TEST-0011: Test Contract Interactions
    
    SCSVS-CRYPTO
    SCSVS-CRYPTO
    
    Overview
    
    Overview
    
    Tests
    Tests
    
    SCSTG-TEST-0013: Secure Signature Verification
    
    SCSVS-ORACLE
    SCSVS-ORACLE
    
    Overview
    
    Overview
    
    Tests
    Tests
    
    SCSTG-TEST-0016: Testing Arithmetic and Logic Security
    
    SCSVS-BLOCK
    SCSVS-BLOCK
    
    Overview
    
    Overview
    
    Tests
    Tests
    
    SCSTG-TEST-0008: Efficient Loop and Function Design
    
    SCSVS-BRIDGE
    SCSVS-BRIDGE
    
    Overview
    
    Overview
    
    Tests
    Tests
    
    SCSTG-TEST-0009: Blockchain Data and State Management
    
    SCSVS-DEFI
    SCSVS-DEFI
    
    Overview
    
    Overview
    
    Tests
    Tests
    
    SCSTG-TEST-0014: Test Gas Usage in Loops
    
    SCSVS-COMP
    SCSVS-COMP
    
    Overview
    
    Overview
    
    Tests
    Tests
    
    SCSTG-TEST-0012: Test Token Implementations (ERC20, ERC721, ERC1155)
SCWE
SCWE
SCS Checklist
SCS Checklist
News
News
- None
🎙 Talks
⭐ Contribute
⭐ Contribute
💙 Donate
💙 Donate
💬 Connect with Us

🎙 Talks¶

Date	Event	Title	Video	Slides
18th March 2025	Podcast	OWASP Smart Contract Top 10 Podcast	Video	Slides

© OWASP Foundation 2024. This work is licensed under CC-BY-4.0. For any reuse or distribution, you must make clear to others the license terms of this work.
OWASP ® is a registered trademark of the OWASP Foundation, Inc. This website uses cookies to analyze our traffic and only share that information with our analytics partners. Learn more.

Made with Material for MkDocs | Website Created by Pratik Lagaskar. | Covers Designed by Siddharth Neekher.