THE STATE MACHINE

Assumed conscious users: zachobront, gmhacker

Most auditors do that unconsciously

All contracts can be reduced to something of this sort. It's the actual invisible puzzle.

Think in terms of "Going from one state to another" when interacting with a contract

Think in terms of the "Reachability" of a bad state.

DRAWING THE STATE MACHINE (2/2)

• Assumed users: gpersoon (uses PowerPoint), tincho (uses Miro)
  • Understand all of the contracts fully, let the information sink in, and sleep over it.
  • Make some thorough diagrams and move parts around while letting the mind wander.
  • Let the subconscious mind find interesting bugs.
  • Draw an arrow that leads to a state in which the desired behavior does not match the actual behavior.

Follow this blog for more info: https://medium.com/@sm4rty/diagramming-smart-contract-for-security-auditing-sm4rty-33baa26a8574