EEA Releases Model 2 of the EthTrust Safety Ranges Specification – Enterprise Ethereum Alliance

Normal represents a serious advance in making certain safety inside the Ethereum ecosystem.

Wakefield, Mass. — December 18, 2023 — The Enterprise Ethereum Alliance (EEA) has at this time introduced the discharge of Version 2.0 of its EthTrust Security Levels Specification. 

The specification was crafted by safety consultants from over a dozen firms, together with famend names in Ethereum safety like Diligence, OpenZeppelin, Hacken, and CertiK, in addition to main companies like Banco Santander, Microsoft, and EY. Notably, it contains specialist safety corporations, their typical clientele, and impartial consultants, all working collectively to raise safety measures. 

 Chaals Nevile, Director of Technical Packages on the EEA, stated: “EthTrust represents a pivotal development in making certain safety inside the Ethereum ecosystem. It serves as a complete ‘high quality examine’ for Ethereum, setting a benchmark for safety requirements.”

A Strong Framework for Sensible Contract Safety

EthTrust’s major operate is to supply a sturdy framework for reviewing Sensible Contract code written in Solidity, the predominant language for Ethereum-based blockchains. This framework is designed to establish and rectify identified safety vulnerabilities, providing a excessive stage of assurance within the security and safety of the code.

The first beneficiaries of the brand new specification embrace:

1. Builders: EthTrust reduces the workload for safety reviewers by addressing elementary points. This interprets to decrease prices and a heightened concentrate on uncovering advanced or novel vulnerabilities.
2. Prospects: It provides clients the boldness that safety opinions meet elementary high quality requirements.
3. Reviewers: Reviewers profit from a complete and present guidelines of identified points. This streamlines their routine duties, permitting them to focus on extra intricate and inventive evaluation points of their function.

Important Enhancements 

This collaborative effort concerned a 12 months and a half of information sharing and systematic revision inside EEA’s EthTrust Working Group. The strategy has led to important enhancements over the unique model launched final 12 months, showcasing EEA’s functionality for efficient ongoing upkeep and updates. 

Enhancements embrace, amongst different issues:

• Extra express remedy of read-only re-entrancy
• Some new bugs found within the Solidity compiler
• Express remedy of rounding errors
• Simplification of testing necessities to streamline the method for many builders with out compromising the power to cowl uncommon code; in addition to 
• Updates to the specification with newly found vulnerabilities and changes in focus to replicate altering developments in assaults. 

The brand new commonplace gives dependable, industry-backed steering for the broader Ethereum/EVM-based blockchain ecosystem. The brand new commonplace is freely out there on-line from EEA: EEA EthTrust Security Levels Specification.

Contacts

Contact for extra data on the usual: Chaals Nevile, EEA Director of Technical Packages, [email protected]. 

Contact for normal EEA media inquiries: Tom Lyons, EEA Director of Communications and Content material, [email protected]. 

In regards to the EEA

The EEA is a member-led {industry} group whose goal is to drive using Enterprise Ethereum and Mainnet Ethereum blockchain know-how as an open commonplace to empower ALL enterprises. Extra at entethalliance.org.