Web3 Security Library

This is a collaborative repository that aims to contain all the information you need to start or expand your knowledge in web3 security.

Annexure

Categorisation	Link
Starting Guides	Inspect
Blockchain Concepts	Inspect
Bug Fix Reviews	Inspect
Smart Contracts	Inspect
Tools	Inspect
Vulnerabilities	Inspect
Check This Out	Inspect
How to Add Resources	Inspect

Starting Guides:

• Hacking the Blockchain: Ethereum

Blockchain Concepts

• Web3
• EVM
• Non EVM chains
• Types of Blockchain Consensus:
• Wallets
• Resources:

Bugfix Reviews

• 2022

  • November 2022
  • September 2022
  • August 2022
  • July 2022
  • June 2022
  • May 2022
  • April 2022
  • March 2022
  • February 2022
  • January 2022

• 2021

  • December 2021
  • November 2021
  • October 2021
  • September 2021
  • August 2021
  • July 2021
  • June 2021
  • May 2021
  • April 2021
  • March 2021
  • February 2021

Smart Contracts

• Ethereum Virtual Machine
  • Solidity
  • Vyper
  • Huff

Tools

• Frameworks/ Programming Tools
  • Hardhat (JS) EVM
  • Truffle (JS) EVM
  • Brownie (Python) EVM
  • Foundry (Solidity) EVM
  • Substrate Polkadot
• Blockchain Analysis
• Activity Monitoring
• Threat Intelligence & On-chain Data:
• Vulnerability Scanners & Others:
• Other Tools
• Resources:

Vulnerabilities

• Logic

  • Bad Arithmetics
  • Integer underflow/overflow
  • Checks

• Reentrancy

• Uninitialized

  • Contracts
  • Proxies

• Code injection via delegatecall

• Access Control

  • Unprotected functions
  • Signature Verification
  • Default Visibility
  • Authentication with tx.origin

• Wrong implementation of standards

• Flashloans

• Oracle manipulation

• Unchecked call return value

• Transaction reorganization (MEV)

• Bad Randomness

• Use of components with known vulnerabilities

Check This Out:

• CTFs to Enhance your Solidity Skills
• How to...
• Interviews
• Research Papers
• People to Follow
• Resources from YouTube
• PoC like a pro

How to add Resources?

Please follow the structure of the file you are editing. Whenever possible add a description of the resource you want to share. Send a pull request adding in the comment your Twitter and Discord users to thank you for the contribution and receive XP in the Discord leveling system.

Plagiarism: Word-for-word copying of portions of another's writing won't be allowed.