What Constitutes a Good Test Suite?

Auditing and Security
, ,
5

Thanks for pointing that out Leo, it’s indeed an interesting solution. However, there are several questions that come to mind about your proposal:

  1. Wouldn’t this solution be more expensive and require a greater level of expertise to develop and operate than to simply write a test suite?

  2. Do you know of anyone offering this as a service? Just did a quick search for “Front running as a service” and found this post from Jun 2020 Front-Running as a Service. There’s been some back-and-forth… | by Ed Felten | Offchain Labs | Medium

  3. Defining “transactions that could potentially harm your smart contract” is not always easy. It may be the case that a legitimate whale transactions is front-run by the monitoring system. How would you avoid such situations?

I’m also thinking this discussion is slightly deviating from the actual title of “What Constitutes a Good Test Suite?” It might make sense to have a list of “Smart Contract Defences” where the different things proposed so far would be included along with things such as code analyzers, bounty programs, etc. Or would your other post A Survey on Ethereum Systems Security: Vulnerabilities, Attacks, and Defenses be the right place to include a list/discussion about defences?

2 Likes