# 🧱⛓☠️ 1337 blockchain hacker toolkit
## the evm
* [EVM opcodes](https://github.com/crytic/evm-opcodes)
* [Ethereum book](https://github.com/ethereumbook/ethereumbook)
* [Ethereum's Whitepaper](https://ethereum.org/en/whitepaper/)
* [Understanding rollups](https://barnabe.substack.com/p/understanding-rollup-economics-from?s=r)
* [Speeding up the EVM by Flashbots](https://writings.flashbots.net/research/speeding-up-evm-part-1/)
---
## solidity
* [Solidity docs](https://docs.soliditylang.org/en/v0.8.12/)
* [OpenZeppelin docs](https://docs.openzeppelin.com/)
* [Solidity by example](https://solidity-by-example.org/)
* [Solidity style guide](https://docs.soliditylang.org/en/latest/style-guide.html)
* [Solidity 201 primitives](https://github.com/x676f64/secureum-mind_map/blob/master/3.%20Solidity%20201.md)
* [Solidity Python course](https://www.youtube.com/watch?v=M576WGiDBdQ)
* [Solidity by Securitum bookcamp](https://www.youtube.com/watch?v=5eLqFac5Tkg)
* [Smart contract programmer videos](https://www.youtube.com/channel/UCJWh7F3AFyQ_x01VKzr9eyA/videos)
* [Ethereum smart contract best practices](https://consensys.github.io/smart-contract-best-practices/)
* [Solidity cheatsheet and best practices](https://github.com/manojpramesh/solidity-cheatsheet)
----
## all things security
* [SWC Registry](https://swcregistry.io/)
* [Blockchain Security Database](https://consensys.github.io/blockchainSecurityDB/)
* [Intro to Security first dev](https://www.youtube.com/watch?v=72K57I9yvyI)
* [Spoof tokens on Ethereum](https://medium.com/etherscan-blog/spoof-tokens-on-ethereum-c2ad882d9cf6)
* [Solidity security mind map](https://github.com/x676f64/secureum-mind_map)
* [Pitfalls and best practices](https://github.com/x676f64/secureum-mind_map/blob/master/4.%20Pitfalls%20and%20Best%20Practices%20101.md)
* [Hacking the Blockchain by Immunefi](https://medium.com/immunefi/hacking-the-blockchain-an-ultimate-guide-4f34b33c6e8b)
* [Uniswap Oracle Attack Simulator by Euler](https://blog.euler.finance/uniswap-oracle-attack-simulator-42d18adf65af)
* [Thinking About Smart Contract Security by Vitalik](https://blog.ethereum.org/2016/06/19/thinking-smart-contract-securi`ty/)
* [Advanced Pitfalls and best practices](https://github.com/x676f64/secureum-mind_map/blob/master/5.%20Pitfalls%20and%20Best%20Practices%20201.md)
* [246 Findings From our Smart Contract Audits: An Executive Summary](https://blog.trailofbits.com/2019/08/08/246-findings-from-our-smart-contract-audits-an-executive-summary/)
* [Dan Guido: Trail of Bits – The Evolution of Smart Contract Security](https://www.youtube.com/watch?v=fOkQuNzVn_Q)
* [Audit findings](https://github.com/x676f64/secureum-mind_map/blob/master/7.%20Audit%20Findings%20101.md)
* [Advanced audit findings](https://github.com/x676f64/secureum-mind_map/blob/master/8.%20Audit%20Findings%20201.md)
* [Video on audit findings](https://www.youtube.com/watch?v=SromSImIpHE)
* [Sigp public audits](https://github.com/sigp/public-audits)
* [The Dangers of Price Oracles in Smart Contracts](https://www.youtube.com/watch?v=YGO7nzpXCeA&list=PLdJRkA9gCKOONBSlcifqLig_ZTyG_YLqz&index=5)
* [Strategies for Secure Governance with Smart Contracts](https://www.youtube.com/watch?v=GbDAmMdmh8Q&list=PLdJRkA9gCKOONBSlcifqLig_ZTyG_YLqz&index=6)
* [Security in Upgrades of Smart Contracts](https://www.youtube.com/watch?v=5WE6PEc305w&list=PLdJRkA9gCKOONBSlcifqLig_ZTyG_YLqz&index=7)
* [Onward with Smart Contract Security](https://www.youtube.com/watch?v=RipXdV7vygs&list=PLdJRkA9gCKOONBSlcifqLig_ZTyG_YLqz&index=8)
* [Publications from Trail of Bits](https://github.com/trailofbits/publications#blockchain)
* [Smart contract security fundamentals by OpenZeppelin](https://www.youtube.com/playlist?list=PLBy3Qkuapv_7R1ZI_Cs2NOFn7ZTaNWY6G)
* [White Hat panel: DeFi exploits](https://www.youtube.com/watch?v=Df2zzfoTfMc)
* [Smart contract audit checklist](https://consensys.net/diligence/blog/2019/09/how-to-prepare-for-a-smart-contract-audit/)
* [Another audit checklist](https://github.com/nascentxyz/simple-security-toolkit)
* [Ethereum signature database](https://www.4byte.directory/)
* [OpSec SelfGuard RoadMap](https://github.com/OffcierCia/Crypto-OpSec-SelfGuard-RoadMap)
* [The Solcurity Standard](https://github.com/Rari-Capital/solcurity)
* [Smart Contract Security Verification Standard](https://github.com/securing/SCSVS)
* [SecurETH Guidelines](https://guidelines.secureth.org/)
* [REKT leaderboard](https://rekt.news/leaderboard/)
* [Rug Doc Wiki](https://wiki.rugdoc.io/)
* [Smart Contract Attack Vectors](https://github.com/KadenZipfel/smart-contract-attack-vectors)
* [List of known attack vectors](https://blog.sigmaprime.io/solidity-security.html)
* [Awesome Ethereum security](https://github.com/crytic/awesome-ethereum-security)
* [Bug Bounty 101](https://www.youtube.com/watch?v=S-Z2iwbT1Fg)
---
## contracts of interest
* [Uniswap v3](https://github.com/Uniswap/v3-core/tree/main/contracts)
* [Chainlink](https://github.com/smartcontractkit/chainlink/tree/develop/contracts/src/v0.4)
* [Fei protocol](https://github.com/fei-protocol/fei-protocol-core/tree/master/contracts)
* [OpenZeppelin's ERC-20](https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/contracts/token/ERC20/ERC20.sol)
* [OpenZeppelin's ERC-721](https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/contracts/token/ERC721/ERC721.sol)
* [Immunefi notes on the ERC token standard](https://medium.com/immunefi/how-erc-standards-work-part-1-c9795803f459)
* [Security contracts from OpenZeppelin](https://github.com/OpenZeppelin/openzeppelin-contracts/tree/master/contracts/security)
---
## practice your hacking skils
* [Capture the Ether](https://capturetheether.com/)
* [Paradigm CTF 2022](https://github.com/paradigmxyz/paradigm-ctf-2022) and [Paradigm CTF 2021](https://github.com/paradigm-operations/paradigm-ctf-2021).
* [Damn vulnerable DeFi](https://www.damnvulnerabledefi.xyz/)
* [A collection of EVM puzzles](https://github.com/fvictorio/evm-puzzles)
* [Gamefication vault](https://hats.finance/gamification)
* [Cipher Shastra](https://ciphershastra.com/)
* [Etherhack](https://etherhack.positive.com/#/)
* [DeFiHack.xyz](https://www.defihack.xyz/)
* [w3b s3c](https://www.w3bs3c.com/tools)
* [List of blockchain CTF competitions](https://github.com/blockthreat/blocksec-ctfs)
* [Crypto blacklist](https://www.cryptoblacklist.io/en/ethereum-blacklist/)
* [Cipher Shastra](https://ciphershastra.com/)
* [Vyper Punk](https://github.com/SupremacyTeam/VyperPunk)
---
## hacking tools
#### ethereum general
* [Ethstats](https://ethstats.net/)
* [EthTx Transaction Decoder](https://ethtx.info/)
* [Eth converter](https://eth-converter.com/)
* [Cryptocurrency historical data snapshot](https://coinmarketcap.com/historical/)
* [Contracts diff checker](https://etherscan.io/contractdiffchecker)
* [Mutation Testing for Ethereum Smart Contracts](https://github.com/JoranHonig/vertigo)
* [Tenderly](https://dashboard.tenderly.co/)
* [Foundry resources](https://github.com/bt3gl-labs/Blockchain-Hacking-Toolkit/tree/main/Foundry)
* [Wallet impersonator](https://www.impersonator.xyz/)
* [Ethereum nodes](https://ethereumnodes.com/)
#### analysis tools
* [Manticor, symbolic execution tool](https://github.com/trailofbits/manticore)
* [Echidna, smart contract fuzzer](https://github.com/crytic/echidna)
* [Mythril, security analysis tool for EVM bytecode](https://github.com/ConsenSys/mythril)
* [Oyente, analysis Tool for Smart Contracts](https://github.com/enzymefinance/oyente)
* [Trail of Bits' Ethereum Security Toolbox](https://github.com/trailofbits/eth-security-toolbox)
* [Rattler, EVM binary static analysis](https://github.com/crytic/rattle)
* [Slither, Static Analyzer for Solidity](https://github.com/crytic/slither)
* [Securify, Security scanner for Ethereum smart contracts](https://github.com/eth-sri/securify2)
* [Etheno, Ethereum security analysis and testing](https://github.com/crytic/etheno)
* [Surya, A Solidity Inspector](https://github.com/ConsenSys/surya)
* [Octopus, Security Analysis tool for WebAssembly](https://github.com/pventuzelo/octopus)
* [ETK, EVM toolkit](https://github.com/quilt/etk)
* [Pyevmasm, EVM disassembler and assembler](https://github.com/crytic/pyevmasm)
* [Verx, smart contract verifier](http://verx.ch/)
* [Semgrep rules for smart contracts](https://github.com/Raz0r/semgrep-smart-contracts)
* [ETH detective](https://www.ethtective.com/address/)
* [Tornado Cash Pool Anonymity Auditor](https://tutela.xyz/)
* [EVM-trace, Ethereum Virtual Machine transaction tracing tool](https://github.com/ApeWorX/evm-trace)
#### vscode
* [Vscode plugin: Solidity visual](https://marketplace.visualstudio.com/items?itemName=tintinweb.solidity-visual-auditor)
* [Vscode plugin: Solidity support](https://marketplace.visualstudio.com/items?itemName=JuanBlanco.solidity)
#### other useful dev tools
* [Solhint, a linter for Solidity](https://github.com/protofire/solhint)
* [Solidity coverage tool](https://github.com/sc-forks/solidity-coverage)
* [JSON formatter](https://jsonformatter.curiousconcept.com/)
* [Craft requests from curl commands](https://reqbin.com/)
* [Tools by Notonly.owner](https://www.notonlyowner.com/learn/intro-security-hacking-smart-contracts-ethereum)
* [Ethereum Developer Tools List](https://github.com/ConsenSys/ethereum-developer-tools-list)
* [Immunefi scrapper](https://github.com/pratraut/scrapyFi)
* [Crystal Blockchain](https://explorer.crystalblockchain.com/)
* [0XT](https://oxt.me/)
* [Impersonator](https://www.impersonator.xyz/)
* [CIA Officer's DeFi Roadmap](https://github.com/OffcierCia/DeFi-Developer-Road-Map#transaction-visualization-scoring--tracking)
* [Mnemonic Code Converter](https://iancoleman.io/bip39/)