How Do You Practically Test CEI Patterns in Solidity QA Workflows?
CEI (Checks-Effects-Interactions) is repeated in every audit report, yet few QA testers know how to prove that a contract truly follows it. During a Layer-1 DeFi audit shadow I reviewed, two state variables updated after an external call and still passed tests.
That got me thinking: how do you practically test CEI patterns inside Solidity QA pipelines—especially when storage updates, events, and cross-contract calls overlap?
I’d love to hear real workflows or Foundry/Hardhat tricks that help catch CEI violations before audits do.