Security Resources
0xalpharush opened this issue · comments
I wasn't able to use markdown over telegram, but here is what I sent along with hyperlinks.
Learn how the Ethereum blockchain works under the hood by reading the Ethereum documentation, Yellowpaper, and/or the Ethereum book. For a good start to Blockchain in general, read the Bitcoin book (by the same author as the Ethereum book).
Gain experience developing Solidity smart contracts so that you become familiar with the language and underlying concepts. CryptoZombies is a good start to learn Solidity and hardhat is the currently best framework to build smart contracts.
Complete Solidity CTFs to learn about common flaws in smart contracts, how to exploit them, and how to mitigate them (in order of difficulty): Ethernaut, CaptureTheEther, DamnVulnerableDeFi, and ParadigmCTF are our favorites.
Write unit tests for your smart contracts and make use of our tools, Slither and Echidna, to find more advanced types of bugs. Please consider filing issues or sending us PRs if you run into any issues with them!
Check out our building-secure-contracts repo which contains a lot of guidelines for writing secure contracts and tutorials to effectively use our tools. We've built this up over the years from our experience auditing Ethereum smart contracts and using our publicly available tools to find bugs.
Sign up for Ethereum (Week in Ethereum) and Blockchain Security (Secureum, BlockThreat) newsletters to stay up-to-date with developments in the space.
Participate in public bug bounties (Immunefi, Code 423n4) to gain experience with reviewing blockchain projects for security issues, and to build a reputation.
Go through the Secureum videos on Youtube to fast-track your Ethereum security knowledge.
Awesome, yeah I'll do the security specialization after I get the first iteration going