mirror of
https://github.com/autistic-symposium/blockchains-security-toolkit.git
synced 2025-05-17 14:10:32 -04:00
👾 notes and resources on decentralized protocols (e.g. oracles, bridges, honeypots, cryptography, decompilers, static analysis, bug bounties)
| EVM-and-opcodes | ||
| Foundry | ||
| Gray-Hat | ||
| Oracles | ||
| Smart-Contract-Security | ||
| Solidity-Expert | ||
| Top-Immunefi-Vulnerabilities | ||
| README.md | ||
🧱⛓☠️ Blockchain Development and Security
EVM
- EVM opcodes
- Ethereum book
- Ethereum's Whitepaper
- Understanding rollups
- Speeding up the EVM by Flashbots
Solidity
- Solidity docs
- OpenZeppelin docs
- Solidity by example
- Solidity style guide
- Solidity 201 primitives
- Solidity Python course
- Solidity by Securitum bookcamp
- Smart contract programmer videos
- Ethereum smart contract best practices
- Solidity cheatsheet and best practices
Blockchain security
- SWC Registry
- Blockchain Security Database
- Intro to Security first dev
- Spoof tokens on Ethereum
- Solidity security mind map
- Pitfalls and best practices
- Hacking the Blockchain by Immunefi
- Uniswap Oracle Attack Simulator by Euler
- Thinking About Smart Contract Security by Vitalik
- Advanced Pitfalls and best practices
- 246 Findings From our Smart Contract Audits: An Executive Summary
- Dan Guido: Trail of Bits – The Evolution of Smart Contract Security
- Audit findings
- Advanced audit findings
- Video on audit findings
- Sigp public audits
- The Dangers of Price Oracles in Smart Contracts
- Strategies for Secure Governance with Smart Contracts
- Security in Upgrades of Smart Contracts
- Onward with Smart Contract Security
- Publications from Trail of Bits
- Smart contract security fundamentals by OpenZeppelin
- White Hat panel: DeFi exploits
- Smart contract audit checklist
- Another audit checklist
- Ethereum signature database
- OpSec SelfGuard RoadMap
- The Solcurity Standard
- Smart Contract Security Verification Standard
- SecurETH Guidelines
- REKT leaderboard
- Rug Doc Wiki
- Smart Contract Attack Vectors
- List of known attack vectors
- Awesome Ethereum security
- Bug Bounty 101
Contracts of interest
- Uniswap v3
- Chainlink
- Fei protocol
- OpenZeppelin's ERC-20
- OpenZeppelin's ERC-721
- Immunefi notes on the ERC token standard
- Security contracts from OpenZeppelin
Practice your hacking skils
- Capture the Ether
- Paradigm CTF 2022 and Paradigm CTF 2021.
- Damn vulnerable DeFi
- A collection of EVM puzzles
- Gamefication vault
- Cipher Shastra
- Etherhack
- DeFiHack.xyz
- w3b s3c
- List of blockchain CTF competitions
- Crypto blacklist
- Cipher Shastra
- Vyper Punk
Hacking tools
Ethereum general
- Ethstats
- EthTx Transaction Decoder
- Eth converter
- Cryptocurrency historical data snapshot
- Contracts diff checker
- Mutation Testing for Ethereum Smart Contracts
- Tenderly
- Foundry resources
- Wallet impersonator
Analysis tools
- Manticor, symbolic execution tool
- Echidna, smart contract fuzzer
- Mythril, security analysis tool for EVM bytecode
- Oyente, analysis Tool for Smart Contracts
- Trail of Bits' Ethereum Security Toolbox
- Rattler, EVM binary static analysis
- Slither, Static Analyzer for Solidity
- Securify, Security scanner for Ethereum smart contracts
- Etheno, Ethereum security analysis and testing
- Surya, A Solidity Inspector
- Octopus, Security Analysis tool for WebAssembly
- ETK, EVM toolkit
- Pyevmasm, EVM disassembler and assembler
- Verx, smart contract verifier
- Semgrep rules for smart contracts
- ETH detective
- Tornado Cash Pool Anonymity Auditor
- EVM-trace, Ethereum Virtual Machine transaction tracing tool