werew / awesome-blockchain-security

A curated list of awesome blockchain security resources

Awesome Blockchain Security

A curated list of blockchain security resources

Contents

• Lists
• Vulnerabilities
• Incidents
• Audits
• Security Testing
• Safe Frameworks
• Bug Bounties
• Reverse Engineering

Lists

• Ethereum Smart Contract Security Best Practices by ConsenSys
• Awesome Blockchain Security by Chainflag
• Coming soon: smart contract security knowledge base

Vulnerabilities

• SWC Registry
• Solidity bugs
• Smart Contract Attack Vectors
• Ethereum Smart Contract Security Best Practices

Incidents

• Rekt.news
• Blockchain graveyard
• Blocksec incidents

Audits

• OpenZeppelin Audits
• Collection of 101 findings from audits

Security Testing

• Manticore
• hevm
• MythX
• Solidity coverage
• List of Static and Dynamic Analysis tools

Safe Frameworks

• OpenZeppelin Contracts

CTF & Wargames

• Chainflag
• The Ethernaut
• Damn Vulnerable DeFi
• Paradigm CTF
• CTF-wiki list

Writeups

• ETH Challenges for X-MASCTF2021
• Misc writeups by @hitcxy
• 34c3 CTF archive
• Paradigm CTF 2021

Bug Bounties

• Bug Bounties list

Reverse engineering

Learn

• Deconstructing a Solidity Contract

Tools

• Ethereum Signature Database
• EVM Opcodes and Decompiler
• EVM GFG builder
• JEB decompiler
• Ethersplay: Binary Ninja plugin
• Ghidra EVM

Contribute

Contributions welcome! Read the contribution guidelines first.