Several Platforms to Make It Easier to Check SmartContracts

[Patikno]

Hello friends, this time I will open a simple discussion about What is a Smart Contract, what is the importance of checking a Smart Contract, and how to check a Smart Contract.

➥As the name implies, a Smart Contract is a smart program that is created automatically to run or approve a contract if the conditions are met. A simple example that is similar to the real world is like a vending machine from the Cola-cola or Sprunk brand (a famous brand in GTA: 3), so simply the machine system will automatically dispense drinks after someone inserts their money into the machine. I hope you can accept this analogy.

➥In terms of checking, Smart Contracts can be checked by anyone because of their transparent nature, so everyone can see the code of a particular Smart Contract, but I think there needs to be a basic understanding of coding to be able to check Smart Contracts. Even so, various platforms have provided their services to make it easier for anyone to check them. In some cases, there are also problematic Smart Contracts, which can potentially harm anyone, some problematic Smart Contracts that are often encountered are such as; Honeypot (usually developers allow buyers of their coins or tokens to not be able to sell them), mint (usually developers can print as many coins or tokens as they wish), unverified (cannot be seen/not transparent), and several others.

➥From the brief discussion above, we can conclude that we need to check SmartContract to avoid scams or fraud. From that, we really have to check it. However, currently we don't need to have coding skills to check it, because we can try several platforms to check it easily, and this is what I will tell you about some of these provider platforms:

    1. Token Sniffer

➥ The first is Tokensniffer, on this site the way to check sc or SmartContract is quite easy, namely by simply pasting the sc in the column (Search token by address). For example, we can see it in the following:


➥ Here I tried to check one of the tokens, and the result is that it has one problematic contract and was reported by the site, namely  " the contract allows the creator or developer to change the behavior of the contract (eg: disable sales, change fees, or mint new tokens). There may be a legitimate reason not to release ownership, ask the project team for that information. "


    2. GoPlusLab - Token Security Detection

➥ The second is the Coin or Token Security Detector from GoPlusLab. How to use it on the site is also quite easy like TokenSniffer, but it has shortcomings compared to TokenSniffer, namely it cannot check the sc from the Solana network, and then when we paste the sc, the site cannot automatically detect it, and here we need to select the L1 or Layer1 network from the SmartContract that we will enter. For example:



➥ Here I am trying to check the sc of a coin or token on the Ethereum network, so I need to select the Ethereum network, and then check it, and the result is that there is no problem with the sc or Smartcontract.



    3. De.Fi - Scanner

➥ The third is De.Fi scanner or we can call it Detector. The checking method on this site is also similar to TokenSniffer, you only need to attach the sc or SmartContract that you want to enter (you can even scan NFT), and then the site automatically detects the name or Ticker of the sc that you attach. For example:





➥ Then here I tried to check the SC of a token, and the result was that there was one problem, namely that there was a possibility that the token had a dump risk if a large holder sold its tokens massively, and even the site provided several case examples of a project that had problems with that.


Well, maybe for now that's all the information I can convey to all of you. If there are any mistakes, deficiencies, or things you want to ask, please give your response so we can discuss it together. Maybe in the future if this discussion is interesting enough to talk about, then I will add some other auditors or scanners that I haven't explained, for example Certik and others. That's all from me, hopefully this information is useful for all of us, especially for beginners like me.

[btcltcdigger]

Good. Many people believe those "verified by hacken" stickers and such nonsesence.
I know a guy who works at hacken, and their security checks are "medium" at best, not to mention that anyone can find a sticker on google images and put it on their website.

[cryptoaddictchie]

Ive been using defi scanner before when I want to check the memecoin on eth network and in bsc
 Its quite helpful indeed as defi scanner got it all good showing all vulnerabilities of each smart contract you check. If theres a honeypot function or can mint tokens it can be seen. So it will help you distinguish a scammers memecoin from real.

[Bitcoin_Arena]

There are many other platforms. I mostly know those that check Solana based smart contracts since I realized that those that work with Ethereum or BSC based contracts can't work with solana

So here goes the list
1. https://birdeye.so
2. https://rugcheck.xyz
3. https://rugchecker.com
4. https://solsniffer.com

[Patikno]

Good. Many people believe those "verified by hacken" stickers and such nonsesence.
I know a guy who works at hacken, and their security checks are "medium" at best, not to mention that anyone can find a sticker on google images and put it on their website.

Thanks for this information, but could you tell us more about it?. I tried to search for information about it on google, but I didn't get any more information.

Ive been using defi scanner before when I want to check the memecoin on eth network and in bsc
 Its quite helpful indeed as defi scanner got it all good showing all vulnerabilities of each smart contract you check. If theres a honeypot function or can mint tokens it can be seen. So it will help you distinguish a scammers memecoin from real.

Yes, I also often use defi scanner to check the tokens that I will try to trade, and I think the UI looks good, as well as the results of the check, I think it really helps. Meanwhile, the one I use most often is the Goplus scanner, but sometimes it often undergoes maintenance so that the site cannot be opened, so I switched to the Defi scanner.

There are many other platforms. I mostly know those that check Solana based smart contracts since I realized that those that work with Ethereum or BSC based contracts can't work with solana

So here goes the list
1. https://birdeye.so
2. https://rugcheck.xyz
3. https://rugchecker.com
4. https://solsniffer.com

Well that's great, I didn't expect there would be so many other scanners that I just found out about, I appreciate your input, so that it can add references for many people to scan certain coins or tokens. I think I will also try some of those scanners, and then review them here later.

By the way, recently I saw that there is a content creator who often talks about security vulnerabilities, and it seems that he even opens classes or courses for anyone about it. And I also saw that he said there are so many job opportunities about it, but even though you get a certificate after completing the course, they don't guarantee a job spot, it seems strange.

So, what do you think about this? Is it worth it?

Here it is: Youtube

[joniboini]

By the way, recently I saw that there is a content creator who often talks about security vulnerabilities, and it seems that he even opens classes or courses for anyone about it. And I also saw that he said there are so many job opportunities about it, but even though you get a certificate after completing the course, they don't guarantee a job spot, it seems strange.

I can't access his social media profile because I don't have an account, but does he state that his certificate gives you a guarantee for a job spot? I don't think a certificate from popular cloud-based education platforms gives you that. I remember enrolling in a free lesson from Udemy and other platforms, and they don't give me any guarantee of securing a decent job. It's just one way to give your claims about your skill some proof. I think I can understand why because looking for a job in audit for smart contracts needs a high skill that requires more than a certificate of you passing a lesson about basic smart contract reading.

[cryptoaddictchie]

By the way, recently I saw that there is a content creator who often talks about security vulnerabilities, and it seems that he even opens classes or courses for anyone about it. And I also saw that he said there are so many job opportunities about it, but even though you get a certificate after completing the course, they don't guarantee a job spot, it seems strange.

This seems interesting a course for security vulnerabilities. Id hope to learn this kind of stuff as well. Definitely a lot of jobs for that especially in crypto. Many projects pays huge for this kind of expertise. But since its hard to implement, the payment of this is probably huge and outstanding.

Gonna watch the youtube and finds out about this. Will get a feedback later.

[joniboini]

^ So, what do you think of that channel? Last time I checked, it was a channel with low views. While the YouTube algorithm can be blamed for that, another reason might be that the content is not really attractive to the viewers. If we're speaking about platform recommendations to verify smart contracts, it is not a good source to look for that either.

[Patikno]

^ So, what do you think of that channel? Last time I checked, it was a channel with low views. While the YouTube algorithm can be blamed for that, another reason might be that the content is not really attractive to the viewers. If we're speaking about platform recommendations to verify smart contracts, it is not a good source to look for that either.

I think the channel is honest enough to say that they cannot guarantee jobs after completing the course or getting the certificate, regarding the low views, I don't think it's just an algorithm problem, but I think it's because there are few people who are really interested in the genre/type of video, so it's natural that the number seems very small. For me, the problem is whether they provide adequate learning modules, so that it will be very useful, even after graduating we can still relearn. I personally am quite interested in learning about it, especially taking a course, but I don't think it's the time to start for some reason.

By the way, recently I saw that there is a content creator who often talks about security vulnerabilities, and it seems that he even opens classes or courses for anyone about it. And I also saw that he said there are so many job opportunities about it, but even though you get a certificate after completing the course, they don't guarantee a job spot, it seems strange.

This seems interesting a course for security vulnerabilities. Id hope to learn this kind of stuff as well. Definitely a lot of jobs for that especially in crypto. Many projects pays huge for this kind of expertise. But since its hard to implement, the payment of this is probably huge and outstanding.

Gonna watch the youtube and finds out about this. Will get a feedback later.

Well, I think so, but it seems we have to learn the basics first to be able to know at least, and then we can learn the advanced level with online courses with some practice, although I wish there was offline learning, because I feel it would be easier to learn that way.

[cryptoaddictchie]

Well, I think so, but it seems we have to learn the basics first to be able to know at least, and then we can learn the advanced level with online courses with some practice, although I wish there was offline learning, because I feel it would be easier to learn that way.

Actually youre right. Upon researching with the basics I find it hard to actually learn it and needed massive focus. So Id find it able to see that these tutorials can somehow help total beginners with 0 experience on that. Any beginnet will be needed to adjust and learn the fundamental of security itself.

[joniboini]

I think the channel is honest enough to say that they cannot guarantee jobs after completing the course or getting the certificate, regarding the low views, I don't think it's just an algorithm problem, but I think it's because there are few people who are really interested in the genre/type of video, so it's natural that the number seems very small.

I kinda agree with that, but it's hard to say if they are reliable enough for the average joe to refer to if they want to check out if a smart contract is shady or not. I guess you could say they provide the skill to do that, but that's an extra step compared to using the tools you shared in the OP. Maybe that's another reason why the views are small: people like instant things nowadays, and if a service is not instant, they think it's a waste of time. Even reading an article is a bit too much for some people.

[armanda90]

Unbelievable I miss many platform or website easily for tracking SmartContracts include with fees for buying and selling, how much liquidity and many other feature giving by that website exactly when tracking new coins landed in our wallet. Usually I use explore website only for tracking SmartContracts and check at Poocoin how much that coins liquidity and have transaction for buying and selling or not? OP recommended quite well about several platform support for tracking SmartContracts as usually many people just tracking trough explore website such as BSC Scan or Ethplore if coins supported with ERC20 network.

Looks interested with platform of Token Sniffer for tracking SmartContracts because there are available how much liquidity for that coins, which one DEX listing until how trust issues about honeypot coins or not.

[Patikno]

Well, I think so, but it seems we have to learn the basics first to be able to know at least, and then we can learn the advanced level with online courses with some practice, although I wish there was offline learning, because I feel it would be easier to learn that way.

Actually youre right. Upon researching with the basics I find it hard to actually learn it and needed massive focus. So Id find it able to see that these tutorials can somehow help total beginners with 0 experience on that. Any beginnet will be needed to adjust and learn the fundamental of security itself.

Yes, I think this discussion might also be able to encourage someone to learn more deeply and even master it, but I think it all requires passion, because I think not everyone has an interest in this thing, even so I hope this tutorial can also help beginners who have no experience at all like you @cryptoaddictchie said.

I think the channel is honest enough to say that they cannot guarantee jobs after completing the course or getting the certificate, regarding the low views, I don't think it's just an algorithm problem, but I think it's because there are few people who are really interested in the genre/type of video, so it's natural that the number seems very small.

I kinda agree with that, but it's hard to say if they are reliable enough for the average joe to refer to if they want to check out if a smart contract is shady or not. I guess you could say they provide the skill to do that, but that's an extra step compared to using the tools you shared in the OP. Maybe that's another reason why the views are small: people like instant things nowadays, and if a service is not instant, they think it's a waste of time. Even reading an article is a bit too much for some people.

Unfortunately what you @joniboini said about it is true, most people now really like things that are fast or instant, and I think it is not good to only have that principle, maybe in some cases the principle is useful, but in many cases the principle should be avoided, because basically something that smells of instant is not good. Therefore, I add a little about the advanced learning, so I hope there are also people who are really interested in learning it deeper, and I hope I can also be one of them when it is possible for me.

Unbelievable I miss many platform or website easily for tracking SmartContracts include with fees for buying and selling, how much liquidity and many other feature giving by that website exactly when tracking new coins landed in our wallet.

I think you @armanda90 are not too late, because I think there are still so many people who don't even know anything about this. I also feel happy when there are people like you who get new knowledge, especially about this smart contract tracking, and that is one of my goals to open this discussion, so that we can share experiences or even open a window for others, and your review is one of the triggers.

[nelson4lov]

Good job on the research. I don't mean to shit on such good work but most of this automatic smart contracts checkers and scanners just look at patterns only. If a developer is creatively with how they craft their contracts, these platforms you mentioned wouldn't catch it one bit. It would be even harder to catch via manual expert smart contract audit but not impossible. However, its worth noting that these tools can act as a first-pass. At least if you're going to blindly ape shit, might as well use shitty scanners to get bare minimum stamp of approval.