Smart Contract QA Engineer (Oracle)

About the role

This role focuses on ensuring the security and reliability of oracle smart contracts through comprehensive automated testing. You will design and implement frameworks for unit, integration, and end-to-end tests, specifically targeting core scenarios like price data feeds and multi-party consensus. The work involves simulating abnormal network conditions to perform stress and fault tolerance testing, directly contributing to the robustness of CoinMarketCap's blockchain solutions.

A key part of the job is developing and executing security test cases, with an emphasis on identifying common attack vectors such as flash loan attacks and data tampering. You will collaborate with developers to conduct vulnerability scanning and code audits before deployment, aiming to eliminate critical security risks. This proactive approach helps maintain the integrity of the platform's oracle mechanisms.

Success in this position means consistently delivering high-quality test documentation, defect reports, and quality assessments. You will also participate in verifying oracle node data accuracy and benchmarking performance. Staying current with blockchain testing tools and methodologies is essential, as you will be expected to introduce new approaches to enhance testing efficiency and overall system security.

The salary for this full-time remote position ranges from $80,500 to $138,000 annually.

Skills that matter here

• Solidity: Proficiency in Solidity is required for testing and understanding the smart contracts under review.
• JavaScript: This language will be used to develop automated testing scripts for smart contracts.
• TypeScript: This language will be used to develop automated testing scripts for smart contracts.
• Python: This language will be used to develop automated testing scripts for smart contracts.
• Hardhat: Experience with this mainstream testing framework is necessary for designing and implementing automated tests.
• Foundry: Experience with this mainstream testing framework is necessary for designing and implementing automated tests.

Who this role suits

• A candidate who thrives on identifying vulnerabilities and ensuring system integrity.
• Someone with a structured approach to testing, capable of designing comprehensive frameworks.
• An individual who stays current with blockchain security trends and testing methodologies.
• A collaborative professional who can work closely with development teams on code audits and issue resolution.

From the employer

• Design and implement automated testing frameworks for oracle smart contracts, covering unit tests, integration tests, and end-to-end tests.
• Develop and execute security test cases, focusing on core scenarios such as price data feeds, off-chain data retrieval, multi-party consensus mechanisms, and resistance to Sybil attacks.
• Simulate various on-chain and network abnormal conditions (e.g., high Gas fees, network latency, node failures) to conduct stress testing and fault tolerance testing.
• Work closely with the development team to perform vulnerability scanning and assist in code audits before contract deployment, ensuring no critical security risks.
• Create and maintain clear test documentation, defect reports, and quality assessment reports.
• Participate in verifying the accuracy of oracle node data and conducting performance benchmarking.
• Continuously follow blockchain testing tools and best practices, and introduce new testing methodologies to enhance efficiency.

• Bachelor’s degree or higher in Computer Science, Software Engineering, or a related field.
• 3+ years of experience in smart contract testing or development, with proficiency in Solidity and mainstream testing frameworks (e.g., Hardhat, Truffle, Foundry).
• Deep understanding of oracle mechanisms (e.g., Chainlink, Band Protocol) and awareness of common attack vectors (e.g., flash loan attacks, data tampering).
• Familiar with fundamental blockchain concepts (consensus mechanisms, Gas optimization, event logs, etc.) and tools (e.g., Web3.js, Ethers.js).
• Capable of developing automated testing scripts using JavaScript/TypeScript, Python, or similar languages.
• Experience in security testing or code auditing is preferred, with knowledge of common vulnerabilities (e.g., reentrancy, integer overflow) and mitigation methods.
• Strong communication skills and a collaborative mindset, adaptable to agile development environments.