Smart Contract Auditor
Smart Contract Auditor: Audit DeFi Code for a Blockchain Security Firm. A 4–8 weeks Intravarsity career experience (30–50 hours) for school and undergraduate
Smart contract auditing is one of the highest-paid skills in Web3. You'll work with a blockchain security firm to learn systematic auditing methodologies, analyze real DeFi codebases for vulnerabilities, and produce professional-grade audit reports.
Work with a blockchain security firm to audit real DeFi smart contracts. Find bugs, identify vulnerabilities, write formal audit reports — the same work security firms charge $50K+ for.
Who it is for
High school, secondary school students & undergraduates. Basic programming knowledge helpful. Interest in security or blockchain.
Weekly plan
Week 1: Solidity Deep Dive & Common Bugs
- Meet the security firm team and learn their audit methodology
- Deep dive into Solidity — storage, memory, gas optimization
- Study the top 20 smart contract vulnerability patterns
- Analyze real exploits — The DAO, Wormhole, Ronin Bridge
Week 2: Manual Auditing Techniques
- Review a real DeFi contract line-by-line for vulnerabilities
- Identify reentrancy, access control, and oracle manipulation risks
- Learn formal verification concepts for critical functions
- Write findings with severity ratings following industry standards
Week 3: Automated Tools & Testing
- Use Slither, Mythril, and Echidna for automated vulnerability scanning
- Write property-based tests with Foundry
- Combine manual and automated findings into a comprehensive audit
- Review your audit with the firm's senior auditor
Week 4: Audit Report & Presentation
- Compile findings into a professional audit report
- Present to the security firm's clients and Web3 founders
- Discuss responsible disclosure and bug bounty programs
- Receive Proof-of-Work credential and security firm recommendation
What you produce
- Professional smart contract audit report
- Vulnerability findings with severity ratings
- Automated scan results
- Security firm recommendation
- Intravarsity Proof-of-Work credential
Skills
Solidity, Smart Contract Security, Slither/Mythril, Foundry, DeFi Protocol Analysis, Vulnerability Research, Technical Writing, Formal Verification
Commitment
~5–8 hours/week for 4–8 weeks (30–50 hours total). 100% Virtual — work remotely with a blockchain security firm.