Free download1 sections · 2 min readBy Dezső Mező · Published .mdtemplateMarkdownblockchainauditthreat-modelsolidity
The template we fill in on day one of every smart-contract audit. STRIDE-based, crypto-native.
Markdown template for smart-contract threat modelling: entities, trust boundaries, STRIDE categories per contract, standard invariant list. Free, MIT-licensed.
01What the file contains
- STRIDE categories with smart-contract-specific examples
- Trust-boundary diagram template
- Common invariants · never-broken statements
- Reentrancy, access control, oracle, upgrade threat classes
- Post-deploy monitoring matrix
What to take away
- STRIDE categories with smart-contract-specific examples
- Trust-boundary diagram template
- Common invariants · never-broken statements
- Reentrancy, access control, oracle, upgrade threat classes
- Post-deploy monitoring matrix
Terms used in this piece
More from the lab
Browse all entries- Foundry invariant starter · for smart contracts
- ERC-4337 paymaster starter
What Solana RPC actually costs once the prototype works
Solana foot-guns Anchor does not remove
Want this looked at on your own system?Start a conversation
