Ethereum Blockchain Developer Build Projects Using Solidity Reviews
Top 10 Smart Contract Developer Tools You Need for 2022
A comprehensive tooling guide for Smart Contract, Blockchain, Web3, Ethereum, and Solidity developers. Plus a brief wait at Solana, Terra, and other rust-based tools
Concluding twelvemonth, I looked at the top smart contract developer frameworks, and this year, we are expanding that to look at more, manner more.
We will look at ten categories of tools and and then await at the top ones in each category for smart contract/blockchain/solidity/vyper/rust/web3 developers (we take also many terms for "blockchain developer" now, don't we).
I've worked with every tool on this list in some chapters, and then you can exist assured I'g not copy-pasting some listing. For those of y'all who don't know me, I live and exhale smart contracts and work forth some of the all-time in the manufacture as a programmer advocate on the Chainlink project, CEO of my own blockchain infrastructure company, and lover of web3. These will requite yous exactly what some of the all-time developers in the world apply. This list, notwithstanding, is not a list of everything out at that place, then if I missed your tool, sad! It'south simply a list of what I call back every developer needs to be aware of. So, let'southward jump into it!
Tabular array Of Contents Smart Contract Langage
Smart Contract Essentials
Deployment & Testing Framework
Wallet
Block Explorer
Layer 1 Connection
Forepart Tools
Aid & Support
Security Analysis
Monitoring & Maintainance
Additionally, nosotros made a video on this topic, if you want to cheque it out!
1. Smart Contract Language
The language is the most fundamental part of any smart contract developer, and is how to write smart contracts! Option one of these languages and go.
Solidity
If you're new here, you should start with solidity. If y'all've been making smart contracts, you probably know solidity. Solidity is the most dominant, most used smart contract development language, and information technology's no wonder why. Solidity works on most smart contract platforms, like Ethereum, Avalanche, Moonbeam, Polygon, BSC, and more. This is due to most blockchains adopting the Ethereum Virtual Motorcar (EVM), which solidity was built for. Out of the summit 10 Defi projects at the moment, nine of the ten use solidity as their principal programming language.
If I had to guess, I'd imagine that xc% of the world's smart contract value is done with solidity. This language is actively maintained and has massive back up.
Yous could also authorize yul/assembly equally another language, but information technology'southward used with solidity, so I'm not counting it as its own.
Vyper
Vyper is some other EVM compatible language, and it'south used primarily by 1 out of the top 10 Defi projects (and some other projects use it as a secondary), namely Curve.fi. Vyper is a python based language that I've LOVED working with. It doesn't accept nearly every bit much employ equally its EVM sibling solidity; nevertheless, if yous like python, this is a language that you might want to try over solidity.
Rust
Rust is the new kid on the cake, and you're not going to be able to use it with our EVM blockchains similar Ethereum, Polygon, Binance Smart Chain, and such. However, with Rust, you'll be able to deploy to chains similar Solana, Terra and build blockchains with Polkadot. Rust is a performant general-purpose language used even outside smart contracts; hence other bondage are choosing to option information technology up. The logic is, "oh, well, some developers already know rust, and then nosotros might as well let people use rust everywhere."
Rust is a solid choice if y'all want to tap into these up-and-coming blockchains. If I had to guess, I'd say Rust encompasses about v% of the world's value locked in smart contracts at the moment… but that's a full guess.
Smart Contract Language Summary
Must-Know: Solidity
Python Lovers: Vyper
Terra, Solana, Polkadot, etc: Rust
2. Smart Contract Essentials
This is where we talk about tools to employ in your smart contracts. You lot don't take to option just one here. Y'all could use all of these if you similar! I wasn't certain how to categorize these, but I thought "essentials" were good considering… well, they are essential.
Chainlink
Chainlink is what's known as a blockchain oracle, which means it's a device that enables your smart contracts to go hybrid smart contracts, which means they include some off-chain component and connect with the real world. Smart contracts are great, but they have the massive result of not being connected to the earth in any way. Now to use some off-chain component (similar data or external ciphering) to continue our smart contracts decentralized, we must also accept our external data and computation decentralized, and that's exactly what the Chainlink network and tooling are for.
The vast majority of top smart contract platforms are hybrid smart contracts and utilise these oracles as critical components of their infrastructure. Just look at the summit 10 projects from DeFipulse and see which ones are hybrid.
We can see that at least fifty% use oracles as essential pieces of infrastructure, and another thirty% (totaling 80%) employ oracles in some way. You tin get nugget pricing information, random numbers, event-driven execution, then much more than.
Chainlink is an essential feature for whatever smart contract programmer coming into this infinite, no matter the language or blockchain!
Additionally, in 2020 and 2021, we saw countless hacks of flash loan attacks, oracle manipulation attacks, and the likes that deemed for nearly billions of dollars lost in the Defi space. What kills me the nearly is that more than half of these were preventable past using a proper oracle like Chainlink. Please, delight, please, don't let you lot or your friends employ centralized or insecure oracles in 2022.
Please use a secure oracle solution like Chainlink. We cannot let 2022 to be another year where we go "whoops, use a centralized oracle and lost my users $100M". So please become familiar with Chainlink to make amazing, robust applications and protect yourself confronting avoidable exploits.
Openzeppelin
Openzeppelin has cemented itself as the "standard library for solidity." Anytime any developer (myself included) is looking for a quick way to deploy an NFT/ERC721, ERC20, upgradable contracts, DAOs/governance, or really anything that many developers practice in this space, nine times out of x, you're going to want to reach for an Openzeppelin bundle.
Openzeppelin is a suite of smart contracts already written, then you lot don't have to reinvent the bike. I've saved endless hours using their already-audited extendable smart contracts in my projects. I cannot stress how much a staple Openzeppelin is. I retrieve in near 80% of my tutorials, I apply Openzeppelin in some capacity.
Smart Contract Essentials Summary
Must-Know: Chainlink & Openzeppelin
Yous can (and probably should) use both of these together. I cannot emphasize enough the knowing of these technologies.
3. Deployment & Testing Framework
Last year, my review was exclusively for this category, and then this twelvemonth, I'll make certain to give you the diff of where I recall these frameworks stand today. Smart Contract frameworks are an essential part of any developer's journey. They allow you to exam and deploy your smart contracts effectively. Having at least one is a crucial pace to success.
To get you started, take a look at the chart I compiled showing the pinnacle Defi projects according to Defipulse and the framework they use.
Additionally, here is how I look at the mural of frameworks currently:
The Big Amazing Ones:
Hardhat, Brownie, DappTools
The Good Ones:
Remix, Truffle, Apeworx, Foundry
The Alt Ones:
Waffle, sbt-ethereum, web3j, Embark, Saddle
Non-EVM Ones:
Anchor, TerraSDK
Outdated:
Etherlime, Openzeppelin SDK, Cobra, Parasol
I won't be roofing the outdated ones; meet my review last year on them.
Let's Begin.
The Big Astonishing Ones
Hardhat
Right now, the hardhat framework is easily the nearly dominant smart contract development framework. Hardhat is a javascript & solidity-based development framework that does a beautiful task of quickly getting your applications up to speed. You can check out the hardhat-starter-kit to see an instance of what a hardhat project looks like.
With Hardhat'southward testing speed, typescript support, wide adoption, incredible programmer experience-focused squad, it'south no wonder why information technology's risen so quickly in popularity. At effectually this time last year, I gave this framework the top spot, and information technology'south withal there today. It uses ethersjs on the backend, its ain local blockchain for testing, and the team is currently in the midst of building a new cutting edge development platform integrated into Hardhat that I'm BEYOND excited to try for 2022.
If you know me, I'm not the biggest fan of javascript due to all its oddities, and so often, I prefer to utilise Hardhat with typescript. Hardhat is easily my second virtually used framework.
I highly recommend this framework if you like javascript or y'all desire to use the most popular framework with the nigh support.
Brownie
I'k in honey with the brownie framework, and if you lot've read any of my other material, you know this.
Credibility is an open-sourced python-based framework congenital on top of web3.py used by protocols like Bend.fi, yearn.finance, and Badger. It supports both solidity and vyper, but the main describe to this framework is python-based. Credibility was created because and then many python engineers despised working with javascript and wanted a pythonic framework. Additionally, most of the traditional fintech world uses python instead of javascript, so moving from fintech to Defi has been made easier with the cosmos of Brownie.
Brownie is my go-to framework when creating a new projection, and I've self-appointed myself every bit a brownie developer advocate. You can check out the credibility-starter-kit (also known as "mixes" in the brownie world) to brainstorm your journey working with the framework. Be sure to check out the Credibility Mixes repo for a listing of other starter kits.
I highly recommend this framework if you like python, want to employ a more straightforward framework or apply my favorite 1.
DappTools
Although Dapptools doesn't have a fancy logo, it's a compelling application built with Haskell. Don't worry, though; y'all don't need to know Haskell to use it!.
Used primarily by the MakerDAO team (the group backside DAI), Dapptools was inspired by the philosophy of Unix, "Write programs that do one thing, and exercise it well." Dapptools is a command-line-focused tool where instead of having to work with python, javascript, or some other loftier-level programming language to aid your development, you can utilise the command line/shell tools that y'all're already familiar with, like bash or zsh. This effectively cuts down on 1 more engineering science that you must be familiar with and forces you to go ameliorate at your trounce scripting! It comes with a suite of tools like dapp, seth, ethsign, and hevm, each a tool specifically designed for a portion of what you lot'll need to do equally a smart contract developer.
I've started working with Dapptools a lot more recently, and I love the mentality backside it. I started a Dapptools starter kit to show other people how to work with the tool. If you piece of work with Dapptools, y'all'll likely be working with makefiles and beat scripts to "productionize" your code. Dapptools believes testing should be written in solidity, and fuzzing should be born.
My experience working with information technology is a little clunky, but I experience a big role of that comes from my mediocre bash scripting skills. However, I loved how it forced me to get better at shell scripts, which I think everyone should do.
I highly recommend this framework if you don't desire to learn some other language like javascript or python, you prefer using as few tools as possible in your setups, y'all like MakerDAO, or @transmissions11 has converted you.
The Good Ones
Remix
Everyone and their mothers should know how to use Remix, but not necessarily for production. That's this review of Remix in a nutshell.
Remix isn't a framework per se simply more of an IDE. Remix is a tool that I retrieve anybody should at to the lowest degree start with and so that it's a common ground that everyone can meet on when trying to share ideas. Not everyone will know python, javascript, or bash scripts to connect, and then using a tool like Remix is perfect since it'southward a more visual tool.
When you deploy a contract, you go buttons to collaborate with it. It's easy to cull solidity versions, compile, run solidity tests, and the like. And if you lot want to use javascript, it has javascript scripts bachelor likewise! It comes fully extendable, so you can improve information technology if you want to add a feature, and you lot can even connect your local deejay to remix to run code from your version-controlled repo.
Remix is a tool that brings everyone together, and I'yard so happy we accept a team working on such a fantastic tool to help everyone. Remix isn't something that I'd recommend avant-garde users to use, though, as you'll get more fine-tuned tools in a local development environment instead of always having to rely on a web IDE. I don't recommend information technology for advanced setups; all the same, use it if y'all like to work with it!
I highly recommend anybody be familiar with Remix (it'due south straightforward to get upward to speed if you know solidity).
Truffle
Truffle is one of the original frameworks and was originally part of, spun out from, so merged back into Consensys. It's a javascript-based framework that comes packed with tools like Ganache (which even frameworks similar brownie employ), Drizzle, and the now late truffle teams. Truffle has the most historical bear upon of any framework, and you can see the affect they made on the industry, with many frameworks adopting practices from Truffle. We should feel lucky that this squad came forth and built such an splendid baseline for frameworks. If yous want to effort it out, have a look at the truffle starter kit.
They've recently updated their documentation, they are in the heart of launching version 7 of Ganache, and I've spoken with their squad, who accept informed me they accept big plans, which I'm excited for.
Back in 2019, everyone had heard of or was using Truffle, but in the fourth dimension since and so, the landscape has changed. Hardhat has been in gogogo manner to solidify themselves equally the defacto javascript framework. I often run into bizarre bugs when working with Truffle; their typescript support is subtle, the tests run much slower than Hardhat. It'southward currently difficult to make a case for Truffle when information technology feels similar Hardhat does everything merely a bit better.
At the start of 2021, I was nervous for Truffle, and I even mentioned it at the start of 2021, my reserves of the framework, and it looks like 2021 was the year Hardhat took over. Withal, I recollect the future of Truffle is all the same bright. They have a fantastic team, they've figured out where Truffle will live (with Consensys now), and I'1000 expecting big things out of them for 2022.
Truffle is a framework that you should use if you lot want to support the one that started it all and prefer the syntax of Truffle. For the most office, I'd recommend Hardhat over Truffle; however, I call up Ganache is a potent tool nonetheless and would recommend anyone looking to work with a local testnet accept a look at Ganache. It has a beautiful UI component that you can utilise to "see" transactions easier; it'due south simple to spin upward and tin be installed globally.
ApeWorX
ApeWorX is the python new kid on the block that branched out from the brownie community to brand a more than modular finance-focused framework than its credibility ancestor.
Apeworx works with withal setup and syntax as Brownie, with several fun improvements to the quality of life.
I've only worked with Apeworx a piffling, it feels very brownie-like, and I like the improver of plugins. It'southward unclear if this volition be the sequel to Brownie (similar to how Hardhat took over Truffle mindshare) or if the ii will work aslope each other. In any case, I'm very excited to see what Doggie and his squad are going to create in 2022, and definitely, a framework to keep your eye on, and fifty-fifty try if you lot want something brownie-like that you lot tin can add plugins to.
Foundry
Foundry is dapptools written in Rust. That's the most straightforward summary of the tool.
I've worked with foundry a little less than I've worked with Dapptools, and it feels like this might be the sequel to Dapptools, merely I'm not sure. It's even so command-line focused, expects a similar file structure, and about all the commands from Dapptools have a foundry analogy. The Paradigm team'southward Georgios and friends built this astonishing reimagination of the pop Dapptools, even paying homage to Dapptools in their release article(which y'all LOVE to see in this space.)
Many of the commands and file structure setup work the aforementioned equally Dapptools, and you can barely tell the deviation. This framework is fast, powerful, and focuses on building your tests in solidity, with built-in fuzzing and other powerful tools.
Rust is becoming more and more i of the most popular technologies to fuel the infrastructure of blockchain applications, and this feels like it's in line with that tendency. I'one thousand excited to see which big players pick up both foundry and Dapptools.
The Alt Ones
I'll be a little quicker in this section, as these might exist frameworks yous'd desire to use, but I'g less familiar with them, or I didn't have a great time trying them out myself.
Waffle
Waffle is all the same a popular framework, except it focuses more on testing than a whole suite of tools. Yous tin use waffle with Hardhat as they are both javascript-based, and many people apply that combination setup.
Saddle
Saddle is Compound'south reimagining of Truffle. If you like Compound, give this a attempt!
sbt-ethereum
I hadn't used java much in the terminal few years, which showed when I tried out sbt-ethereum. Sbt-ethereum markets itself every bit:
"An interactive text-based platform with which "hobbyists" — people who are not programmers" — sbt-ethereum.io
This is another framework I reviewed last twelvemonth, and sadly my scala skills haven't gotten much amend. Still, this is another ane you lot might want to endeavour out if you want to stay in the command line world.
Web3j/Epirus
Another framework I reviewed last yr; looking at their website, it seems like they've pivoted their main product from a framework to an enterprise block explorer. Still, they still take their web3j bundle, which is a coffee based framework. You might want to try this out if you know coffee and come across how information technology feels.
Commence
Embark is i that I gave a pretty glowing review of last year. I was able to test and deploy smart contracts from their framework and work with some UI tools. However, it hasn't received a git commit in over a year, and some things have changed in the smart contract ecosystem since then, so I'm non sure what this means for the future of this framework.
Non-EVM
Anchor
As of right now, I'd say the Anchor framework is the biggest non-EVM framework out at that place for working with Solana. If you want to work with Solana, I highly recommend trying out Anchor, as it feels like information technology's the best solution at the moment.
TerraSDK
Terra is another rust-based smart contract blockchain edifice SDKs/frameworks for developers. They at present take Terra.js and a python SDK to start working with them. This is some other framework I haven't spent much fourth dimension with, but i I plan on working with some more this year.
4. Wallet
If y'all're deploying smart contracts in some capacity, you need a wallet to store funds or at least testnet funds. Many will use a combination of the below wallets for various purposes.
MetaMask
Metamask is a tool that just almost everyone in this infinite knows about or should know well-nigh. The concept is uncomplicated and great for testing things in the browser, which all front-cease developers need to exercise. Just about everyone should accept a Metamask or some Metamask-like browser wallet (like perchance Phantom for Solana).
Metamask is a hot wallet that is piece of cake to use. The problem with these is that one time your individual cardinal is out, you're screwed! Additionally, they are always connected to the cyberspace, so if someone gets access to your figurer, you might be out of luck too! Luckily at that place are some helpful other tools for us.
Gnosis Safe
Gnosis rubber is known equally a multi-sig wallet, pregnant it takes Ten number of signatures to transport a transaction. This fashion, if one wallet is compromised, information technology doesn't thing since that attacker would need to compromise at least one-half of the keyholders.
This is a massive tool for smart contract developers, specially those handling a lot of money and want to make sure their assets are prophylactic. A lot of DAOs utilise Gnosis safe equally well for storing their treasuries. Additionally, a gnosis rubber has integrations with many other DAO tooling, similar Snapshot, for casting votes.
Ledger / Trezor
Ledger and Trezor are known every bit "cold wallets," or wallets that are a scrap more cumbersome to make transitions with. This cumbersomeness is intentional; they make it harder for yous, specially attackers, to move funds.
Y'all can use whatsoever combination of cold wallets, hot wallets, and multi-sigs in your projects, and you probably should! Use hot storage for small funds that yous demand to admission and move effectually a lot/quickly, cold storage for things you don't want to touch for a long time, and multi-sigs for significant funds yous wish to protect. Yous can even connect your cold storage wallet every bit one of the keys on a multi-sig!
5. Block Explorer
Block explorers are crucial tools for people who want to "encounter" transactions and what is going on in the world. You lot have all the tools at your disposal to build one of these if you have a layer i connectedness, but 99% of the fourth dimension, you lot're going to want to apply someone else's.
Etherscan
Ah Etherscan, how are y'all complimentary. Etherscan is 1 of those tools that I desire everyone to know and understand how to use. I'd dear to see them be open-sourced, but I empathise that wouldn't be an excellent incentive for them to stay as impressive as they are. Etherscan comes built-in with nearly services, and they do a fantastic job. Etherscan is easily the nigh dominant block explorer for the ETH community, and they have built support for projects like Polygon, ETH 2, and Binance Smart Concatenation.
Etherchain
However, I am happy they have competition, and then they have to stay on their toes! Etherchain is a lightweight block explorer that has also released a wonderful ETH ii explorer that I use more than Etherscan at the moment!
Ethplorer
Another ETH Block explorer, Ethplorer, might be another explorer yous might want to bank check out.
Most other blockchains also take multiple block explorer clients; all the same, the EVM/ETH community speedily has the most, hence why I chose to focus on them hither.
6. Layer 1 Connexion
At present to send transactions, you demand a blockchain to send them to! Now, if you lot worry about toll, all of these have free options that I highly recommend trying out, but you can likewise always run your ain layer one node yourself! A "layer one node" refers to your blockchain connection for those unfamiliar. For case, to send a transaction on the ETH chain, you need to send the transaction to an ETH node. Even Metamask and wallets have a connection to a layer i node running in the background!
Alchemy
Abracadabra is fantastic and is my go-to for an ETH connection and all EVM connections. Information technology's fast, has a cute UI for tracking requests, has a vast array of layer 1s, and it but works. They are incredibly responsive, have great support and developer advocate team, and I'm very excited for what they have in store for 2022.
Infura
Infura is some other application that was hands the most dominant back in 2020 and might yet be. They have expanded into more than products like IPFS, have a solid post-obit, and many tools natively work with Infura. If yous're looking for a solid layer 1, this is the one for you lot.
Moralis
I didn't even KNOW Moralis had a layer 1 product until a few months ago, and I've used information technology a few times, and it works great! Information technology doesn't have the same bells and whistles Infura or Abracadabra accept, but I think that's considering the Moralis value add is more in their front-end services (which are amazing, and we volition get to presently). But Moralis, I think, is even so a stellar choice for anyone looking to use 1 of these tools.
QuickNode
If 1 of the above doesn't accept the blockchain I want, there is a chance QuickNode will. With a massive array of nodes you can connect to and a simple setup, QuickNode is another service that might be for you.
7. Front Terminate Tools
For building full-stack dapps/front-ends, you'll likely still use all the standard tools like javascript, HTML, CSS, and maybe a framework like react, athwart, or graceful. In addition to those, several wonderful tools will make your front-end edifice life much ameliorate.
Web3js/Ethersjs
Web3js and Ethersjs are the two primary javascript frameworks that the world uses, and they both perform uncommonly well on the front terminate. You pretty much have to utilise 1 of these tools if you're building a website, and they do an outstanding job. Recently, trends have been moving towards Ethersjs every bit the more popular one; all the same, they will both do the task.
Moralis
Moralis is a tool I think everyone should get to know. Information technology has web3js back up out of the box and a MASSIVE array of tools to meliorate your front-end life. It's marketed as the "firebase of crypto," and I call up it does precisely that. Perhaps you desire a database for making your front end faster; maybe y'all want to build an Etherscan or an Opensea; peradventure you need a listing of NFTs an address owns. At that place are many things you might want to do that Moralis has born back up for.
Information technology has everything yous need with both an open-sourced toolkit and a deject-based serving framework.
I highly recommend that everyone edifice a web3 website in 2022 know Moralis. They have many boilerplates to get your project started.
UseDapp
Usedapp is another open-sourced project with neat plugins for working with web3. I've used it in some projects and have enjoyed information technology. Checkout
Drizzle
Drizzle is from the family of Truffle, Metamask, Infura, and Consensys and does a groovy job. It creates some simple wrappers in your javascript to work with your contracts, and it has React support built-in! Bank check out Dapp Academy's video on using Drizzle.
The Graph
The Graph is a foundational tool for doing what's chosen indexing. When we want to wait up something on the blockchain, information technology may take a number of queries to do so. For example, if we wanted to see all the addresses on chain that have ane,000 DAI tokens in them. This would be painstakingly long, going through each and every address on-chain and calling the remainderpart. Instead what we could do, is build what's chosen a subgraph that indexes these queries that we desire, and store them in a database much smaller than the entire blockchain. This makes getting specific information about the blockchain much easier!
Note: Depending on the setup of ERC20's it might be trivial to do something similar what's described to a higher place, but this is just an example query.
More tools
Additionally, I think anybody should be enlightened of create-eth-app and scaffold-eth. They are not "tools" exactly, simply starter kits for building web3 applications / dapps, so I think everyone should know well-nigh them!
8. Assistance & Back up
Every developer should know the essential roadmap of getting help on a trouble they get stuck on.
- Google the exact error
- Await on StackOverflow or Stack Exchange ETH (Or whatever Stack Exchange)
- Make an consequence on the projection'south Github
- Ask a question in a forum
- Ask a question in Discord
When asking questions in this space, you want your question to exist:
- Searchable: Then others with the aforementioned trouble can detect your question.
- Minimal and Reproducible: The more than specific to your utilise you get, the less probable you'll go an reply.
You want to retrieve of asking questions in a forum or stack overflow as "living documentation." The amend y'all format your question, the easier information technology becomes to respond. There are no bad questions, only poorly formatted questions; make yours a good 1!
StackOverflow & Stack Substitution ETH
Here is your rule of thumb: "If I see a problem, and an reply for it doesn't show up in the first page of google results, I should post it on stack overflow."
Using this, you'll become the answers you want and help the whole community while you do it! At present y'all won't always become responses from these sites because sometimes your question might exist likewise hard, no ane has done information technology before, or the right eyes haven't seen it. Sometimes, I'll pop a link to my questions in discords to get more eyes on it. Just a dominion of pollex is that Stackoverflow or Stack Exchange ETH should be one of the first places I always look when I run into an issue.
Now, which should you lot postal service to? Well, to exist honest, it doesn't thing. Stack Commutation is usually a little friendlier, but StackOverflow has a better search ranking, so it'due south up to you. Both these forums are for specific technical questions. Don't utilise these forums for more theoretical questions or massive questions. That's more than for a Discord or Twitter.
Discord
In 2022, I hope we move from Discord to forums similar StackOverflow equally the primary ways of support and questions. Discord questions don't get indexed, and therefore can't be ranked. Discord is great for quick chats and billowy ideas but shouldn't be used every bit a back up channel.
Forums
Forums are terrific since they index and rank like StackOverflow. A great example is the Openzeppelin forum, which ranks well, and amazing questions are asked.
ix. Security Assay Tools
Every bit nosotros all know, audits are critical when releasing code onto the blockchain since anyone tin can view and potentially exploit it once it's in that location! And so having tools to help make sure we make fewer errors in our code are essential, and some tools have popped upward in the space to make our smart contracts more secure.
Sadly, I oasis't worked with all of the tools for this section. The few audits I've done have used the Trail of Bits suite and MythX (forth with scrolling through every line of code manually!). You tin bank check out other reviews of these tools from charingane and Matt Solomon.
**Recall, these tools will not always catch every bug, be sure to do your own diligence!**
Slither
Slither is becoming one of the go-to's for static analysis. Built by the Trail of Bits team (ane of my favorite auditors in the infinite), slither is easy to use and can catch many unproblematic mistakes engineers can make. I highly recommend every try out this open up-sourced bug catcher!
MythX
MythX is another Consensys tool that is cloud-based for testing bugs and is said to practice a deeper dive. Many users similar Aave and myself love how in-depth it goes. It does have a paywall for users, simply it's worth it if you have the money.
Mythril
Mythril is an open up-sourced subset of the MythX production'southward tools for assay. Information technology's not i that I've dove into much, merely it looks like it'll give you some promising simple results.
Manticore
Manticore is another Trail of $.25 tool, but instead of static assay, it does symbolic execution, which figures out what will trigger your smart contract to work. If you piece of work with Slither already, you might as well endeavor this out too!
Echidna
Up next again from Trail of Bits (you see why they are 1 of my favorites) is Echidna. This is a fuzzer for EVM contracts that once again you might too attempt if you're working with the other Trail of Bits tools!
Securify
Securify is an incredible open up-sourced tool in that information technology looks for specific vulnerabilities. This is some other one that yous might also effort out!
ten. Monitoring & Maintainance
Our last section doesn't accept a motion picture since, for monitoring, I employ a lot of my own scripts usually. However, I think that Openzeppelin's Defender and Tenderly are tools you should 100% get familiar with. They each are tools that allow you lot to monitor your production code and ensure they stay condom!
If you haven't yet, I highly recommend trying both of these tools out, and permit me know what y'all think!
Summary
This is 1 of my largest manufactures to date, and it contains a massive list of tools. I know there are a lot, but the more y'all build in this space, the more yous realize how of import each of these tools is for speedily edifice applications.
2022 will exist an insane year, and I hope I accept given you some ideas of what to endeavor this year for edifice your amazing, unique, inspiring web3 applications.
Let me know what tools you think I missed in the comments section! And have a FANTASTIC new year! Let'southward brand information technology a big ane!
If you're looking to start your blockchain journey this year, do cheque out how to become a blockchain engineer and this list of x incredible resource to go started.
Source: https://betterprogramming.pub/top-10-smart-contract-developer-tools-you-need-for-2022-b763f5df689a
0 Response to "Ethereum Blockchain Developer Build Projects Using Solidity Reviews"
Enregistrer un commentaire