cmichel-smart-contract-auditor-guide

Compare original and translation side by side

🇺🇸

Original

English

🇨🇳

Translation

Chinese

cmichel.io — How to become a smart contract auditor (reference)

cmichel.io — 如何成为智能合约审计师（参考资料）

Educational routing only. This skill does not reproduce the full article. Read the live page for complete detail, links, and any author updates.

仅作为学习路径指引。本内容不会复制完整文章内容。如需完整细节、链接及作者的最新更新，请访问该页面的在线版本。

Canonical URL

标准链接

How to become a smart contract auditor — Christoph Michel, 30 October 2021 (per page metadata).

如何成为智能合约审计师 — Christoph Michel，2021年10月30日（根据页面元数据）。

What the guide covers (outline)

指南涵盖内容（大纲）

The post is Ethereum / EVM–oriented (most paid audit demand at time of writing, per author). Rough structure:

Section	Topics (high level)
Prerequisites	Programming first; suggests JavaScript as a gateway if new; argues reading code is foundational for review work.
Solidity & security	Learn by doing; recommends CTF-style challenges (e.g. Damn Vulnerable DeFi, Ethernaut, Capture The Ether) and notes overlap / legacy Solidity caveats; mentions harder contests (e.g. Paradigm CTF) and permissionless venues (Immunefi, Code4rena).
Common contracts	ERC-20 / ERC-721 nuances, proxies / `delegatecall` , MasterChef-style rewards, Compound-style lending, Uniswap V2 as AMM baseline—author frames these as recurring patterns in real audits.
Finance vocabulary	Points to a Khan Academy derivatives chapter for options/futures/perp-style language used in DeFi.
FAQ	Staying current (e.g. Twitter, BlockThreat newsletter), rough hourly bands (treat as historical), LOC/hour scoping heuristics, when to stop reviewing, tooling (Solidity Visual Developer), traits (e.g. conscientiousness), Solana as a harder pivot (Rust + account model).

该文章以以太坊/EVM为核心（作者提到，撰写本文时该领域的付费审计需求最大）。大致结构如下：

章节	核心主题
前置要求	先掌握编程基础；如果是新手，建议以JavaScript为入门语言；强调读码能力是审计工作的基础。
Solidity与安全	边做边学；推荐CTF类挑战（如Damn Vulnerable DeFi、Ethernaut、Capture The Ether），并指出了Solidity旧版本的注意事项及内容重叠；还提到了难度更高的竞赛（如Paradigm CTF）以及无需许可的平台（Immunefi、Code4rena）。
常见合约	ERC-20/ERC-721的细节、代理合约/ `delegatecall` 、MasterChef风格的奖励机制、Compound风格的借贷、作为AMM基准的Uniswap V2——作者认为这些是实际审计中反复出现的模式。
金融词汇	推荐参考Khan Academy的衍生品章节，学习DeFi中使用的期权/期货/永续合约相关术语。
常见问题解答	如何跟进行业动态（如Twitter、BlockThreat通讯）、大致时薪范围（仅作历史参考）、每小时审计代码行数的范围估算、何时停止审计、工具使用（Solidity Visual Developer）、所需特质（如细心严谨）、转向Solana的难度更高（涉及Rust语言及账户模型）。

How to combine with blockint

如何与blockint结合使用

Need	Skill
EVM DeFi triage patterns	evm-solidity-defi-triage-agent
Broader DeFi audit / rug posture	defi-security-audit-agent
Exploit post-mortems	flash-loan-exploit-investigator-agent, honeypot-detection-techniques
Solana program security (different stack)	solana-defi-vulnerability-analyst-agent, sealevel-attacks-solana

需求	对应技能
EVM DeFi问题排查模式	evm-solidity-defi-triage-agent
更全面的DeFi审计/ rug pull风险评估	defi-security-audit-agent
攻击事后分析	flash-loan-exploit-investigator-agent, honeypot-detection-techniques
Solana程序安全（不同技术栈）	solana-defi-vulnerability-analyst-agent, sealevel-attacks-solana

Guardrails

注意事项

Stale data — compensation ranges and tool landscape are 2021-era; verify current market and tooling.
Not career or legal advice — hiring, visas, and contracts need professional counsel where relevant.
Jurisdiction — bug bounties and contests have rules; follow each program’s terms.
Ethics — use skills for defensive security and responsible disclosure, not theft or harassment.

Goal: a discoverable pointer to cmichel.io/how-to-become-a-smart-contract-auditor for EVM auditor education context inside blockint.

数据过时 — 薪酬范围和工具生态均为2021年的情况；请核实当前市场和工具的最新信息。
非职业或法律建议 — 招聘、签证和合同相关问题需咨询专业人士。
合规性 — 漏洞赏金和竞赛均有规则；请遵守各项目的条款。
伦理规范 — 将技能用于防御性安全和负责任的漏洞披露，切勿用于盗窃或骚扰行为。

目标： 在blockint中提供一个可检索的指向**cmichel.io/how-to-become-a-smart-contract-auditor**的链接，为EVM审计师的学习提供背景信息。