Avaliação inicial de vulnerabilidades: prática — Forge College

Ready to transform an audit checklist into real, reproducible findings? In this hands-on session, you'll apply vulnerability assessment techniques to generate concrete evidence and initial reporting items. What you will learn: In this lesson, you will apply an audit checklist to a concrete smart contract to identify, document, and justify candidate issues. We cover targeted static checks, state change analysis through controlled transactions, input validation review, and systematic evidence capture (executable scripts, transaction traces, and state snapshots). You will learn how to map findings to a preliminary severity rubric, produce clear reproducible steps, and compile at least three initial findings with artifacts that allow for third-party verification. You will also see how to organize the annotated checklist with links to logs, stdout, and decoded traces. Who this lesson is for: Intended for intermediate-level auditors and developers who are already familiar with smart contracts, a test environment (local node or fork), and a basic audit checklist. Practical knowledge of test execution and trace reading is expected. Key topics covered: Practical application of the audit checklist and annotation of results Targeted static checks and input validation review State change analysis with controlled transactions Evidence capture: executable scripts, traces, and snapshots Writing initial findings with reproducible and severity steps Organizing artifacts for review and integration into the final report By the end, you will have an annotated checklist and a set of initial findings ready for prioritization and writing. Ready to practice with reproducible evidence? Access more resources at https://www.forge.college/