Solidity Code Review & Security Guide

When to Apply

• Writing or implementing contracts and applying secure-by-default patterns.
• Performing a security audit, peer review, or general assessment of Solidity code.
• Auditing access control, external-call safety, and upgradeability logic.
• Preparing for a security audit or bug bounty, or responding to an incident.
• Debugging unexpected behavior in external contract interactions.

Security Thinking Framework

Apply these foundational principles as a mental checklist. Each addresses a category of vulnerability and guides your reasoning.

Core Principles