The Blockchainer Hub
BlockChain
Elpacos/mastering-fuzzing: Practical fuzzing examples for the mastering fuzzing talk
Practical fuzzing examples for the mastering fuzzing talk - Elpacos/mastering-fuzzing: Practical fuzzing examples for the mastering fuzzing talk
Getting Deep Into EVM: How Ethereum Works Backstage
An Ultimate, In-depth Explanation of How EVM Works.
Ethereum Yellow Paper Course
This course was created by Dominik Teiml, Ethereum Tech Lead at Ackee Blockchain, and is intended for anyone interested in an advanced, in-depth study of the...
How To Consume Chainlink Price Feeds Safely
Chainlink price feeds are reliable, but it is crucial to have circuit breakers to prevent any issues from a single source. Using a single entity is not ideal from a decentralization perspective as well, and it is better to have backup plans in case of system failure. Many developers were
Gas Griefing - mau
Exploiting Precision Loss via Fuzz Testing
Fuzz testing is an invaluable tool for finding & maximizing precision loss vulnerabilities..
Numerical Analysis
This article is an overview of Kurt Barry's seminar at Spearbit on performing numerical analysis on DeFi projects to identify vulnerabilities. Spearbit is a decentralized and industry-leading blockchain security services firm pairing protocols with top security researchers with deep subject matter e
MEV-PACK
MEV / Sandwich / Front-run & Back-run:
Perelyn-sama/yul_by_example: Code examples in Yul
Code examples in Yul. Contribute to Perelyn-sama/yul_by_example development by creating an account on GitHub.
0xcacti/awesome-oracle-manipulation: Awesome list of all things oracle manipulation. Creating to help spread a better understanding of oracles and oracle manipulation.
Awesome list of all things oracle manipulation. Creating to help spread a better understanding of oracles and oracle manipulation. - 0xcacti/awesome-oracle-manipulation: Awesome list of all things ...
Notion – The all-in-one workspace for your notes, tasks, wikis, and databases.
A new tool for teams & individuals that blends everyday work apps into one.
Ethereum Smart Contract Auditor's 2022 Rewind • Ventral Digital
This article is the result of reviewing the technical details from many of this year's Smart Contract Vulnerabilities and Exploits in and around the Ethereum ecosystem.
Kristian Apostolov on Twitter
“Here is how you can get an easy H/M on @code4rena or @sherlockdefi. A 🧵 about the CREATE2 optcode👇”
0xJuancito/multichain-auditor: Observations and tips for auditing protocols on multiple chains 🧐
Observations and tips for auditing protocols on multiple chains 🧐 - 0xJuancito/multichain-auditor: Observations and tips for auditing protocols on multiple chains 🧐
bloqarl on Twitter
“1/9:🔒✨Attention auditors! Don't overlook this crucial step in upgradable contracts. Discover why reviewing constructors and initialize functions is crucial
You can use your Solidity contracts with OpenZeppelin Upgrades without modifications...
Wait, without any modification?”
audits/FlorenceFinance-security-review.md at master · pashov/audits · GitHub
Contribute to pashov/audits development by creating an account on GitHub.
dragonfly-xyz/useful-solidity-patterns
Contribute to dragonfly-xyz/useful-solidity-patterns development by creating an account on GitHub.
TWAP Oracle Manipulation Risks, Mudit Gupta - DeFi Security Summit 2022
TWAP Oracle Manipulation RisksBy Mudit Gupta, Chief Security Officer at PolygonPart of DeFi Security Summit 2022 Session 9 - Security 2PDF slides available a...
YAcademy-Residents/defi-fork-bugs: Bugs in commonly forked DeFi protocols
Bugs in commonly forked DeFi protocols. Contribute to YAcademy-Residents/defi-fork-bugs development by creating an account on GitHub.
CPerezz.eth ⟠ 🦀 on Twitter
“🚨🚨Want to learn more about ZKEVM but you're afraid of the big and complex codebase??🚨🚨
Don't worry anymore!! Edu from the @PrivacyScaling team gave A CODE WALK-THROUGH over the ZKEVM-Circuits repo🤯🤯🤯.
Be sure to watch it!🧐🧐
https://t.co/ueojKrwzFQ”
Web3Sec — Never miss any breach ever again
Finally, a community feed which is only made for penetration testers and hackers.
Ventral Digital
Software Architecture • Application Security • Research and Development • ...
Upgradehub
Issues · yieldprotocol/mentorship2022
Uncovering Real-Life Examples of Denial of Service Attacks on Smart Contracts
If you have been trying to learn about potential cases of DoS attacks and end up always with the same examples (as I did), you might be…
Celer cBridge whitehat cheat sheet — VNMRTZ
Celer Bridge, cBridge, is a multi-chain interoperability system that provides cross-chain token bridging with deep liquidity for users between all chains. It's basically a system that lets you move tokens between different blockchains, like a bridge connecting them.
Lending/Borrowing DeFi Attacks
Lending & Borrowing DeFi platforms display common sets of vulnerabilities
crytic/building-secure-contracts: Guidelines and training material to write secure smart contracts
Ethereum precompiled contracts
Ethereum precompiles behave like smart contracts built into the Ethereum protocol. The nine precompiles live in addresses 0x01 to 0x09.