{"repo":"ChainSecurity/deployment_validation","free":true,"listed":false,"github":"https://github.com/ChainSecurity/deployment_validation","clone":"git clone https://github.com/ChainSecurity/deployment_validation.git","description":"Simplified Deployment Validation of EVM-Based Smart Contracts","language":"Rust","stars":37,"topics":["ethereum","smart-contracts"],"license":"AGPL-3.0","category":"blockchain-web3","readme_excerpt":"Please note: This project is currently in BETA status After a complex smart deployment it is very cumbersome to identify any potential (malicious) mistakes during deployment which later could put security at risk. Even harder, smart contract upgrades and configuration changes can result in security accidents. For example, audited smart contracts that are updated with unverified changes on-chain or deployed with a configuration that was not originally reflected in the audit might expose users to unforeseen consequences. These users are not immediately made aware of such changes and therefore still maintain high confidence towards the contract due to a published audit report. Deployment Validation ensures that smart contracts have been deployed with the expected bytecode and configuration. Trusted entities can sign and publish Deployment Validation Files (DVF) which can subsequently be checked against the on-chain smart contracts to ensure a correct deployment at any given block number. Each DVF describes the correct state of exactly one smart contract and may reference other DVFs on whose correctness it depends. Thereby, Deployment Validation checks security not just during development, but also during deployment and later updates. During DVF initialization, dv compiles a given project (Foundry- or Hardhat-based) and compares the generated bytecode with the on-chain bytecode of a given address. This ensures that a deployed smart contract corresponds to a certain repository/com","default_branch":null,"files":null,"tree":[],"storefront":"/r/ChainSecurity","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/ChainSecurity/deployment_validation/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}