# Smart contract threat model template

> The template we fill in on day one of every smart-contract audit. STRIDE-based, crypto-native.

The template we fill in on day one of every smart-contract audit. STRIDE-based, crypto-native.

Markdown template for smart-contract threat modelling: entities, trust boundaries, STRIDE categories per contract, standard invariant list. Free, MIT-licensed.

## What the file contains

- STRIDE categories with smart-contract-specific examples
- Trust-boundary diagram template
- Common invariants · never-broken statements
- Reentrancy, access control, oracle, upgrade threat classes
- Post-deploy monitoring matrix

## What to take away

- STRIDE categories with smart-contract-specific examples
- Trust-boundary diagram template
- Common invariants · never-broken statements
- Reentrancy, access control, oracle, upgrade threat classes
- Post-deploy monitoring matrix

## Tags

template, Markdown, blockchain, audit, threat-model, solidity

## Read the full write-up

/resources/smart-contract-threat-model-template.md

## Terms used in this piece

- https://dfieldsolutions.com/en/glossary/stride.md
- https://dfieldsolutions.com/en/glossary/oracle.md
- https://dfieldsolutions.com/en/glossary/reentrancy.md

## We build this for clients

https://dfieldsolutions.com/en/services/blockchain

## More from the lab

- https://dfieldsolutions.com/en/lab/smart-contract-invariant-starter-foundry.md — Foundry invariant starter · for smart contracts
- https://dfieldsolutions.com/en/lab/erc-4337-paymaster-starter.md — ERC-4337 paymaster starter
- https://dfieldsolutions.com/en/lab/solana-rpc-costs.md — What Solana RPC actually costs once the prototype works
- https://dfieldsolutions.com/en/lab/solana-anchor-footguns.md — Solana foot-guns Anchor does not remove

---

Source: https://dfieldsolutions.com/en/lab/smart-contract-threat-model-template
DField Solutions — Torony köz 5-1.a, 2120 Dunakeszi, Hungary — +36 20 722 0002 — dezso@dfieldsolutions.com
Booking: see https://dfieldsolutions.com/en/contact