Auditing, Testing, and Monitoring in Blockchain Security BDC Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which best practice is recommended when documenting a blockchain security audit?

   • APublish all vulnerabilities publicly before the client has a chance to fix them
   • BKeep the report confidential and share it only with the development team
   • CFocus only on positive findings to avoid alarming stakeholders
   • DProvide a clear, reproducible report that includes methodology, findings, and remediation steps
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A development team is building a DeFi lending protocol and wants to ensure that the smart contract logic is correct before deployment. They have limited time and need to catch logic errors early. Which testing strategy should they prioritize?

   • ARun a single end-to-end test that covers the entire lending process, from deposit to liquidation.
   • BUse a static analysis tool once and assume the contract is secure if no issues are found.
   • CWrite comprehensive unit tests for each function, including edge cases and failure conditions, and run them in a local development environment.
   • DDeploy the contract to the mainnet and monitor it for a week to see if any issues arise.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A team is using property-based testing to verify that a token contract always maintains the total supply invariant. Which property should they test?

   • AThe contract always reverts on invalid inputs
   • BThe total supply can be changed by the owner
   • CThe sum of all balances equals the total supply after any sequence of transfers
   • DThe contract's gas usage is below a certain limit
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A blockchain company operates in multiple jurisdictions and is subject to both GDPR and the EU's MiCA regulation. They are planning a security audit of their DeFi protocol. What is the most important compliance consideration for the audit?

   • AEnsure the audit results are published on a public blockchain
   • BEnsure the audit is performed by an external auditor
   • CEnsure the audit includes a review of how personal data is processed and stored, and that the protocol complies with MiCA's requirements for crypto-asset offerings
   • DEnsure the audit covers all smart contracts in the protocol
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   During the scoping phase of a blockchain security audit, which activity is most directly part of defining the audit scope?

   • AWriting the final audit report with all findings and recommendations
   • BExecuting exploit scripts against the live mainnet contracts
   • CDeploying the smart contracts to a public testnet for monitoring
   • DIdentifying the smart contracts, protocols, and supporting infrastructure that will be examined
   Reveal Solution Discussion Select an answer first