Yos Riady's best practices for smart contract development

Here is Yos Riady's developer handbook for smart contract development (59 min read). It is chock-full with best practices.👏

I dig his personal website, check out for example his periodic retrospectives, called "Recently".

Table of contents

• Use a development environment
• Develop locally
• Use static analysis tools
• Understand security vulnerabilities
• Write unit tests, no exceptions
• Security audit your contracts
• Use audited, open source contracts
• Launch on a public testnet
• Consider formal verification
• Store keys in a secure manner
• Make it open source
• Build CLI tools and runbooks
• Prioritize developer experience
• Provide contract SDKs
• Write good documentation
• Set up event monitoring
• On building DApp backends
• On building DApp frontends
• Strive for usability
• Build with other protocols in mind
• Understand systemic risks
• Participate in dev communities
• Subscribe to newsletters

Screenshot by ConsenSys.