diff --git a/docs/security-considerations.rst b/docs/security-considerations.rst index 61609ec6d..989a6d830 100644 --- a/docs/security-considerations.rst +++ b/docs/security-considerations.rst @@ -20,7 +20,8 @@ to take too much care, but if you manage your bank account using that web servic you should be more careful. This section will list some pitfalls and general security recommendations but -can, of course, never be complete. Also, keep in mind that even if your +can, of course, never be complete. +Also, keep in mind that even if your smart contract code is bug-free, the compiler or the platform itself might have a bug. A list of some publicly known security-relevant bugs of the compiler can be found in the @@ -31,6 +32,10 @@ Solidity compiler. As always, with open source documentation, please help us extend this section (especially, some examples would not hurt)! +NOTE: In addition to the list below, you can find more security recommendations and best practices +`in Guy Lando's knowledge list `_ and +`the Consensys GitHub repo `_. + ******** Pitfalls ********