Terms with context.

Anchor is a Rust framework and toolchain for writing, testing, deploying, and interacting with Solana programs using account validation and generated IDLs.

A smart contract audit is an independent, scope-bound security review of blockchain code using manual analysis, testing, tooling, and documented findings.

Audit scope is the exact code revision, files, systems, assumptions, and exclusions covered by a security review and its final report.

A smart contract auditor is a security researcher who reviews blockchain systems for exploitable behavior, unsafe assumptions, and implementation errors.

A blockchain bridge carries assets or messages between otherwise separate networks by verifying events and authorizing corresponding actions elsewhere.

The ordered record of calls, returns, events, and failures produced during a transaction's execution.

Checks-Effects-Interactions is a smart contract ordering pattern: validate conditions, commit internal state changes, then call external code.

Smart contract CI/CD automatically builds, tests, analyzes, and packages a codebase when changes are proposed, while keeping deployment separately controlled.

Security code review is the manual examination of source code and system interactions to identify defects, unsafe assumptions, and exploitable behavior.

A DAO is an organization whose membership, decision process, treasury, or execution rules are coordinated partly through blockchain-based systems.

Differential fuzzing sends generated inputs or action sequences through two implementations and flags behavior that diverges unexpectedly.

Echidna is an open-source Ethereum smart contract fuzzer that generates call sequences to falsify user-defined properties and Solidity assertions.

EIP-712 defines typed structured-data hashing and signing for EVM systems so wallets can present meaningful fields instead of an opaque byte string.

An engineering day is an effort estimate equal to one specialist working for one standard day; it measures work, not necessarily calendar duration.

ERC-4337 is an account-abstraction system that routes UserOperations through bundlers and an EntryPoint contract without changing Ethereum consensus rules.

The Ethereum Merge was the September 2022 upgrade that joined Mainnet with the Beacon Chain and changed block production from proof of work to proof of stake.

The Ethereum Virtual Machine is the deterministic execution environment that applies smart contract bytecode and state changes consistently across Ethereum nodes.

An audit finding is a documented security or code-quality issue supported by evidence, an impact assessment, and a recommendation or remediation status.

A flash loan is an uncollateralized onchain loan that must be borrowed and repaid, with fees, inside one atomic transaction or the transaction reverts.

Front-running is transaction ordering that places an actor's transaction before a known pending action to profit from or change its outcome.

An EVM function selector is the first four bytes of the Keccak-256 hash of a function's canonical signature, used to dispatch external calls.

Automated testing that explores many generated inputs or action sequences to find violations of expected properties.

Gas optimization reduces the execution or deployment cost of EVM code while preserving its intended behavior, readability, and security properties.

A property that must remain true before and after every relevant state transition in a system.

A local blockchain deployment runs contracts on a private development chain or fork so tests can execute quickly without sending public-network transactions.

Manually guided fuzzing is stateful fuzz testing in which a researcher writes domain-specific actions, preconditions, state models, and invariants.

A blockchain protocol is a defined set of rules and software interfaces that participants follow to reach consensus or provide an onchain application service.

A proxy contract forwards calls to an implementation while retaining the address and storage seen by users, commonly enabling upgradeable smart contracts.

A re-audit is a follow-up security review that verifies fixes and examines an agreed code delta after the original audit, using a newly stated scope.

Reentrancy occurs when an external interaction transfers control and execution enters the calling system again before its earlier operation is safely resolved.

Slither is an open-source Python framework for static analysis of Solidity and Vyper code, with vulnerability detectors, printers, and a custom analysis API.

A smart contract is a program deployed to a blockchain whose state-changing functions execute under the network's deterministic consensus rules.

Solana is a public proof-of-stake blockchain whose runtime executes parallel transactions when their declared account access does not conflict.

A Solana program is executable onchain code, usually written in Rust and compiled to sBPF, that processes instructions using explicitly supplied accounts.

Solidity is a statically typed, object-oriented language for writing smart contracts that compile to Ethereum Virtual Machine bytecode.

Automated smart contract analysis uses static or dynamic tools to surface suspicious code, violated properties, execution behavior, and coverage gaps.

Smart contract unit testing checks small pieces of contract or program behavior in a controlled environment with explicit inputs and expected outcomes.

A Python-based development and testing framework for Solidity with fuzzing, debugging, static analysis, and editor tooling.

A protocol whitepaper describes a system's goals, mechanism, assumptions, and often its economic or cryptographic model; it is not proof that deployed code matches.