blockchains-security-toolkit/README.md

⛓🍕 blockchain hacking for the honorable

tl; dr:

👾 this repository is a catalog from my own (free time / out-of-curiosity) research and development. i open-source it to fight some lousy actors' agenda to conceal the space. there are a lot of just people working on making ensure stays fair. if you are passionate about decentralization and self-sovereignty, don't be intimidated by the toxicity in the space: do your homework and join us (we need you).

🏴‍☠️ if you are interested on mev-related resources, check out our mev-toolkit. as everything in life, the most valuable commodity is information.

---

I. learn the basics

• oracles
• cryptography
• l2s && rollups
• the evm && opcodes
• decentralized storage
• vulnerabilities

II. learn the tools

• environments
• hacking tools
• identity hacking
• static analysis
• dynamic analysis
• hacking by chains

III. learn from history

• bug hunting
• attack reviews

---

security resources

• SWC Registry
• Blockchain Security Database
• Intro to Security first dev
• Spoof tokens on Ethereum
• Solidity security mind map
• Pitfalls and best practices
• Hacking the Blockchain by Immunefi
• Uniswap Oracle Attack Simulator by Euler
• Thinking About Smart Contract Security by Vitalik
• Advanced Pitfalls and best practices
• The Evolution of Smart Contract Security
• Audit findings
• Advanced audit findings
• Video on audit findings
• Sigp public audits
• The Dangers of Price Oracles in Smart Contracts
• Strategies for Secure Governance with Smart Contracts
• Security in Upgrades of Smart Contracts
• Onward with Smart Contract Security
• Publications from Trail of Bits
• Smart contract security fundamentals by OpenZeppelin
• White Hat panel: DeFi exploits
• Smart contract audit checklist
• Another audit checklist
• Ethereum signature database
• OpSec SelfGuard RoadMap
• The Solcurity Standard
• Smart Contract Security Verification Standard
• SecurETH Guidelines
• REKT leaderboard
• Smart Contract Attack Vectors
• List of known attack vectors
• Awesome Ethereum security
• Bug Bounty 101
• DeFi hacks analysis and root causes
• awesome privacy

---

practicing your hacking skils

• Capture the Ether
• the ethernaut
• Paradigm CTF 2022 and Paradigm CTF 2021.
• Damn vulnerable DeFi
• A collection of EVM puzzles
• Gamefication vault
• Cipher Shastra
• Etherhack
• DeFiHack.xyz
• w3b s3c
• Crypto blacklist
• Vyper Punk
• more blockchain ctfs
• list of blockchain CTF competitions

contracts of interest

• Uniswap v3
• Chainlink
• Fei protocol
• OpenZeppelin's ERC-20
• OpenZeppelin's ERC-721
• Immunefi notes on the ERC token standard
• Security contracts from OpenZeppelin
• Smart contracts attack vectors