Standard is an important step in ensuring the security of Ethereum’s ecosystem.
Wakefield, Mass. — December 18, 2023 — You can also find out more about the following: Enterprise Ethereum Alliance The European Economic Area (EEA), today, announced the release Version 2.0 of its EthTrust Security Levels Specification.
The specification was developed by security specialists from more than a dozen companies. These included renowned names such as Diligence (a leader in Ethereum security), OpenZeppelin (a pioneer in Ethereum security), Hacken and CertiK as well major corporations, like Banco Santander Microsoft and EY. The specification includes security experts from a wide range of companies, including renowned names in Ethereum security like Diligence, OpenZeppelin, Hacken, and CertiK, as well major corporations such as Banco Santander, Microsoft, and EY.
Chaals Nevile is the Director of Technical Programmes at EEA. “EthTrust represents a pivotal advancement in ensuring security within the Ethereum ecosystem. It serves as a comprehensive ‘quality check’ for Ethereum, setting a benchmark for security standards.”
Smart Contract Security: A Framework for Robust Security
EthTrust is primarily responsible for providing a robust framework to review Smart Contracts written in Solidity. Solidity is the dominant language used for Ethereum-based Blockchains. This framework is designed for identifying and correcting known security flaws, providing a high-level of assurance on the safety of the code.
The new specification is primarily aimed at:
- Developers: EthTrust reduces workload for security analysts by addressing fundamental concerns. This results in lower costs, and a greater focus on identifying complex or novel vulnerabilities.
- Customers: Customers can be assured that the security review meets fundamental quality standards.
- Reviewers: A comprehensive, up-to-date checklist of issues is available to reviewers. This allows reviewers to streamline their routine tasks so they can focus on more complex and creative aspects of their job.
Significant Improvements
This collaborative effort required a year-and-a-half of knowledge sharing within EEA and systematic revision. EthTrust Working Group. The EEA has demonstrated its ability to maintain and update the software in a timely manner.
Improvements include:
- Re-entry with read-only is treated more explicitly
- Solidity compiler: new bugs found
- Rounding errors are treated explicitly
- Simplicity of requirements for testing to simplify the process and make it easier for developers to work without compromising their ability to test unusual code.
- Updates of the specification based on newly discovered vulnerabilities. Adjustments in focus reflecting changing trends in attacks.
The new standard offers industry-backed guidance to the Ethereum/EVM blockchain ecosystem. The new standard can be downloaded for free online at EEA. EEA EthTrust Security Levels Specification.
Contacts
For more information about the standard, please contact: Chaals NevileEEA Director Technical Programs [email protected].
Contact for general EEA media inquiries: Tom LyonsEEA Director for Communications and Content [email protected].
The EEA
The EEA is a membership-driven industry group whose goal is to encourage the adoption of Mainnet Ethereum as a standard for all enterprises. Visit the website for more information. entethalliance.org.
“This article is not financial advice.”
“Always do your own research before making any type of investment.”
Source: entethalliance.org