Trail of Bits presents Building Secure Smart Contracts, an educational repository of guidelines, reference material, and practical exercises for developing and reviewing secure smart contracts. It supports developers and security engineers in assessing code maturity, applying high-level security practices, preparing for security reviews, planning incident response, and following a secure development workflow. A token integration checklist helps readers consider risks when interacting with non-standard ERC-20 tokens.

The material also explains core EVM concepts, including opcodes, transaction tracing, arithmetic checks, and upgrade or fork changes across Ethereum and compatible ecosystems. Its collection of “Not So Smart Contracts” examples highlights common vulnerabilities in platforms such as Algorand, Cairo, Cosmos, Solana, Substrate, Sui, and TON, with descriptions and recommendations.

For hands-on program analysis, the repository offers tutorials and exercises for Echidna and Medusa fuzzers, the Slither static analyzer, and the Manticore symbolic execution engine. Topics include writing properties, configuring tests, interpreting analysis results, and exploring execution paths.