https://github.com/Certora/ERC4626_Workshop

Repository for the specifications for the Certora workshop on ERC4626 at TrustX @ Istanbul 2023.
https://github.com/Certora/ERC4626_Workshop

Last synced: about 4 hours ago
JSON representation

Repository for the specifications for the Certora workshop on ERC4626 at TrustX @ Istanbul 2023.

• Host: GitHub
• URL: https://github.com/Certora/ERC4626_Workshop
• Owner: Certora
• Created: 2023-11-13T08:03:28.000Z (about 1 year ago)
• Default Branch: main
• Last Pushed: 2023-12-11T12:33:01.000Z (11 months ago)
• Last Synced: 2024-04-26T01:00:24.007Z (7 months ago)
• Language: Solidity
• Size: 52.7 KB
• Stars: 1
• Watchers: 2
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-advanced-smart-contracts-testing-and-verification - **Certora ERC4626 TrustX 2023 workshop**
• awesome-advanced-smart-contracts-testing-and-verification - **Certora ERC4626 TrustX 2023 workshop**

README

        
# ERC4626 Workshop

Repository alongside the Certora workshop on ERC4626 at TrustX @ Istanbul 2023.

# Getting started

1. Familiarize yourself with the [ERC4626 specification](https://ethereum.org/en/developers/docs/standards/tokens/erc-4626/) and take a look at the (buggy) implementation of ERC4626 under `src`.

2. To get to know CVL take a look at the example specification under

[`certora/specs/Example.spec`](certora/specs/Example.spec).

3. [Sign-up for Certora Free Tier](https://www.certora.com/signup?plan=prover)

4. Install the Certora prover following all steps from our official [Documentation](https://docs.certora.com/en/latest/docs/user-guide/getting-started/install.html#)). 

* _Note: It's important to also set the CERTORAKEY evnrionemnt variable._

5. Run the specification by executing `certoraRun certora/conf/Example.conf` from within this folder. Follow the link returned and wait for the verification to be completed. Alternatively, open the [pre-computed results](https://prover.certora.com/output/53900/2140288d54e645cf863adc119d3e235b?anonymousKey=f9958ff2b71e3b2a3b3cd408924c63afbd5f8170).

6. Inspect the results and make yourself familiar with the output. Why does the rule `assetAndShareMonotonicity` fail for method `redeem`? Can you spot the mistake in the rule?

7. Think about properties of ERC4626 and note them down in https://docs.google.com/document/d/116HDhYT8pJMD9DOdrS8NdWdvTnOdsIcEQK9AjnxpdnY/edit

# Write your own CVL specifications

1. Open the file `certora/specs/Tutorial.spec`. 

2. The file contains three rule signatures that need to be implemented. Take a look at the comment and write the specifications.

3. Run Certora by executing `certoraRun certora/conf/Tutorial.conf` and iterate.

4. The solutions are found in branch `solutions`.

5. On branch `solutions` there is a [`Properties.md`](Properties.m) file that lists basic properties for ERC4626. Enhance your CVL specifications to also cover those properties. Which ones can you prove?

# Additional Material

* [Prover Documentation](https://docs.certora.com/en/latest/)

* [ERC-4626 Specifications](https://ethereum.org/en/developers/docs/standards/tokens/erc-4626/)

* [Inflation Attack](https://tienshaoku.medium.com/eip-4626-inflation-sandwich-attack-deep-dive-and-how-to-solve-it-9e3e320cc3f1)