Post a job

4 security resources to learn Web3

Security: finding and fixing vulnerabilities in smart contracts and protocols, through audits, testing and bug bounties.

4 resources

  1. Ethernaut

    OpenZeppelin · Intermediate · Challenges

    OpenZeppelin's wargame: each level is a deliberately vulnerable contract you exploit, which teaches how attacks such as re-entrancy work.

  2. Damn Vulnerable DeFi

    Damn Vulnerable DeFi · Advanced · Challenges

    Hands-on challenges that have you drain deliberately vulnerable DeFi contracts: flash loans, price oracles, governance and upgradeable proxies.

  3. Smart Contract Best Practices

    Consensys · Intermediate · Articles

    Consensys Diligence's guide to common smart-contract attacks, such as re-entrancy and front-running, and the coding patterns that prevent them. No longer actively maintained.

  4. OpenZeppelin on GitHub

    GitHub · Intermediate · Open source

    OpenZeppelin's public repositories, including the audited Contracts library, where you can read the code and open issues.