b1gw00d / AuditorsRoadmap

AuditorsRoadmap

Available at: https://coggle.it/diagram/YqLzaiSABzXD4UnZ/t/smart-contract-auditor
PDF: Smart Contract Auditor.pdf

Step by Step Approach

• Mastering Ethereum

• Proof of Work vs Proof of Stake

• Solidity Fundamentals

  • Solidity Documentation
  • Solidity Docs
  • Smart Contract Programmer - Solidity 0.8
  • Connect Missing Dots with Secureum
    • Secureum Solidity 101
    • Secureum Solidity 201

• Gas Optimizations

  • Aggregated Tricks by pcaversaccio and Harikrishnan Mulackal
  • Kaden: Gas Optimization Tips
  • Juan: Advanced Gas Optimizations

• Smart Contract Testing

  • Hardhat
  • Better Programming Hub
  • Code Eater (Hindi)
  • Foundry
  • Tenderly

• Token Standards

  • ERC20, ERC721, ERC777, ERC1155, ERC4626
  • BEP20

• Openzeppelin Helper Libraries/Contracts

• Upgradeable Contracts

  • Smart Contract Programmer - Upgradeable Contracts
  • Smart Contract Programmer - Risks of Upgradeable Contracts
  • Different Proxy Patterns - EIPs 897, 1822, 1967, 1538, 2535

• Attack Vectors

  • Secureum Security Pitfalls 101
  • Secureum Security Pitfalls 201
  • SWC Registry
  • Smart Contract Programmer - Hack Solidity
  • Kaden: Smart Contract Attack Vectors

• CTFs

  • Ethernaut
  • Capture The Ether
  • Read Walkthroughs

• DeFi

  • Finematics - DeFi
  • Smart Contract Programmer - DeFi
  • Well known protocols: Uniswap v2/v3, Compound, Curve, Aave, Balancer.
  • Stablecoins => Algorithmic Stablecoins
  • Staking Rewards, Vaults

• DeFi Attack Vectors

  • Flash Loan => Price Oracle Manipulation
  • Front-Running => Sandwich attacks
  • Rug Pulls => Unlimited Token Allowance

• CTFs

  • Damn Vulnerable DeFi
  • Read Walkthroughs

• Postmortems

  • Immunefi
  • BlockSec
  • SlowMist
  • Rekt News
  • PeckShield
  • Mudit Gupta
  • Samczun

• Report Reading

  • Secureum Audit Findings 101
  • Secureum Audit Findings 201
  • Trail of Bits, Consensys, Openzeppelin, QuillAudits

• Security Standards & Checklists

  • Rari-Capital Solcurity
  • SCSVS

• Tools

  • VS Code IDE
  • Slither
  • Mythril
  • Mythx
  • Echidna
  • Manticore
  • Surya
  • Scribble
  • BlockSec ETH/BSC Tx Analysis
  • ethtx ETH Tx Analysis

• Continue Learning

  • Ethereum Yellow Paper
  • Ethereum Improvement Proposals (EIPs)
  • Eth Research
  • NewsLetters - Blockthreat, HashingBits
  • Communities
    • Immunefi, Secureum, Blockchain Pentesting( discord )
    • Eth Security Community (Telegram)
  • Be Active on Twitter

• Knowledge Base

  • Inline Assembly
  • Opcodes