🛡️WEB3 SECURITY RESOURCES [BEGINNERS TO INTERMEDIATE]

🛡️ WEB3 SECUIRTY RESOURCES [BEGINNERS TO INTERMEDIATE] :

Start your web3 security journey =>

RESOURCES :

1. CTFs:

1. Ethernaut: https://ethernaut.openzeppelin.com/

2. DamnvulnerableDefi: https://www.damnvulnerabledefi.xyz/

3. Capturetheflags: https://capturetheether.com/

4. Secureum => https://github.com/secureum/AMAZEX-DSS-PARIS

5. QuillCTF: https://quillctf.super.site/#block-904732bd911c48599539cf90685fa75c

————————————————————————————————————————————

1. ROADMAP: [Choose One]

1. Latest roadmap (smart contract auditor) by Cyfrin Audits: https://www.cyfrin.io/blog/how-to-become-a-smart-contract-auditor (Highly Recommended)

2. Smartcontract security researcher: https://coggle.it/diagram/YqLzaiSABzXD4UnZ/t/smart-contract-auditor

QuiiAudit auditor roadmap: https://github.com/Quillhash/QuillAudit_Auditor_Roadmap/blob/main/files/QuillAudits_Auditor's_Roadmap.pdf

4. How to become a smart contract security researcher by cmichel: https://cmichel.io/how-to-become-a-smart-contract-auditor/

5. Matta aereal’s security roadmap: https://mattaereal.notion.site/matta-s-Ethereum-security-road-map-cf7d7f2e48ea4aa0a8f4a2eff86342a7

1. If you want to start your web3 security journey, start with this course for free. One and only COURSE for beginners:

Ethereum 101:

Solidity 101:

Solidity 201:

Security Pitfalls & Best Practices 101:

Security Pitfalls & Best Practices 201:

Audit Techniques & Tools 101:

Audit Findings 101:

Audit Findings 201:

Github (above 8 modules have MCQs ):

GitHub - x676f64/secureum-mind_map: This repo is less actively maintained now but I still monitor it for PR's.GitHub

ABOVE SECURITY COURSE [OLD COURSE] AND BELOW SECURITY COURSE - PART-1 AND PART-2 [LATEST COURSE

1. SECURITY AND AUDITING COURSE(PART-1) : https://updraft.cyfrin.io/courses/security

2. SECURITY AND AUDITING COURSE(PART-2) :

3. Wallets & Post Deployment: https://updraft.cyfrin.io/courses/wallet-and-deployment

4. Assembly & Formal Verification: https://updraft.cyfrin.io/courses/formal-verification

1. Auditor Book: https://theauditorbook.com/

2. Audit Reports from top security professionals (all the audit reports are at one place): https://solodit.xyz/

3. The ULTIMATE auditing and smart contract security research checklist: https://solodit.xyz/checklist

————————————————————————————————————————————

🛡️ RESOURCES FOR SOLO AUDITORS :

1. 2 the best sources of solo audit reports which you can read to improve your skills:

   1. audits/solo at master · pashov/audits · GitHub

   2. https://github.com/zobront/audits/tree/main/reports

2. Mindsets of Auditing: https://mindsets-of-auditing.netlify.app/

(For intermediate and advance security people) => YouTube video: https://youtu.be/kORcOhftwVw

1. Guide for solo auditor 101: https://blog.bytes032.xyz/p/building-a-brand-as-a-solo-auditor-101

2. How to Break into Web3 (While Working Full-Time job): https://blog.bytes032.xyz/p/how-to-break-into-web3-while-working-full-time-job

3. 3 places to participate in security review contests:

   1. CODE4ARENA: https://code4rena.com/

   2. SHERLOCK: https://www.sherlock.xyz/

   3. CODEHAWKS: https://www.codehawks.com/

4. Bug Bounty Platform: https://immunefi.com/

——————————————————————————————————————————————

🛡️ RESOURCES FOR DEFI AND FUTURE OF FINANCE - FULL COURSE :

1. Course I: DeFi Infrastructure:

1. Course II: DeFi Primitives:

1. Course III: DeFi Deep Dive:

1. Course IV: DeFi Risks and Opportunities:

——————————————————————————————————————————————

🛡️ EVERYTHING YOU NEED TO KNOW ABOUT GAS OPTIMIZATIONS IS AT ONE PLACE :

BOOK OF GAS OPTIMISATIONS :

The RareSkills Book of Solidity Gas Optimization: 80+ TipsRareSkills

——————————————————————————————————————————————

🛡️ BEST RESOURCES FOR WEB3 SECURITY (everything about solidity):

1. Solidity Attack Vectors : https://lab.guardianaudits.com/encyclopedia-of-solidity-attack-vectors

2. Common Solidity Bugs : https://lab.guardianaudits.com/encyclopedia-of-common-solidity-bugs

3. Practice all the previous secureum races : https://www.ghostsofepochspast.xyz/

——————————————————————————————————————————————

🛡️ RESOURCES FOR SMARTCONTRACT FUZZING AND INVARIANT TESTING :

1. Fuzzing Workshop by Trail of Bits : https://www.youtube.com/playlist?list=PLciHOL_J7Iwqdja9UH4ZzE8dP1IxtsBXI

2. Invariant Testing Workshop by Antonio Viggiano : https://www.youtube.com/watch?v=YAF79t_Sfiw

3. All about Fuzzing by Victor Martinez : https://www.youtube.com/watch?v=83q14K-WNKM

——————————————————————————————————————————————

🛡️ SOLIDITY INTERVIEW PREPARATION :

1. https://www.jumpdest.dev/

2. https://rareskill-webtres.vercel.app/practice

——————————————————————————————————————————————

🛡️ RESOURCE FOR MATHS IN SOLIDITY (5 PARTS) :

1. https://medium.com/coinmonks/math-in-solidity-part-1-numbers-384c8377f26d

2. https://medium.com/coinmonks/math-in-solidity-part-2-overflow-3cd7283714b4

3. https://medium.com/coinmonks/math-in-solidity-part-3-percents-and-proportions-4db014e080b1

4. https://medium.com/coinmonks/math-in-solidity-part-4-compound-interest-512d9e13041b

5. https://medium.com/coinmonks/math-in-solidity-part-5-exponent-and-logarithm-9aef8515136e