Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Major Update #22

Open
wants to merge 8 commits into
base: master
Choose a base branch
from
Open

Major Update #22

Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
83f91d8
Add several new communities
0xsomnus Jan 25, 2022
aa950fa
Updated CTFs and blog posts
0xsomnus Jan 25, 2022
c00af39
Update README.md
0xsomnus Jan 25, 2022
e9bd9fd
Added ConsenSys blog
0xsomnus Jan 25, 2022
e8a6e1f
Blogs update
0xsomnus Jan 25, 2022
20c8b33
Update README.md
0xsomnus Jan 27, 2022
385c9a1
Update README.md
0xsomnus Feb 21, 2022
d5447e2
Update README.md
0xsomnus Feb 21, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 14 additions & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,6 +36,7 @@ Join Trail of Bits for a free Ethereum Office Hours session by [reserving a slot
* [Decentralized Application Security Project](https://www.dasp.co/)
* [Solidity Security Considerations](https://solidity.readthedocs.io/en/latest/security-considerations.html)
* [Solidity v0.5.0 Breaking Changes](https://solidity.readthedocs.io/en/latest/050-breaking-changes.html)
* [Solcurity](https://github.com/Rari-Capital/solcurity)

### Insecurity references

Expand All @@ -45,10 +46,15 @@ Join Trail of Bits for a free Ethereum Office Hours session by [reserving a slot

### Capture the Flag and Wargames

It is recommended to finish these in order. Capture the Ether and Ethernaut can be swapped out for either.

* [Capture the Ether](https://capturetheether.com/)
* [Ethernaut](https://ethernaut.zeppelin.solutions/)
* [EtherHack](https://etherhack.positive.com/)
* [SI Blockchain CTF](https://blockchain-ctf.securityinnovation.com/)
* [Cipher Shastra](https://ciphershastra.com/index.html)
* [Damn Vulnerable DeFi](https://www.damnvulnerabledefi.xyz/)
* [Paradigm CTF 2021](https://github.com/paradigm-operations/paradigm-ctf-2021/)

#### Writeups

Expand All @@ -66,11 +72,14 @@ Join Trail of Bits for a free Ethereum Office Hours session by [reserving a slot
* [Hacking Distributed](http://hackingdistributed.com/) - Emin Gün Sirer, professor in Cornell Tech’s IC3 lab focused on blockchain security.
* [Phil Does Security](https://pdaian.com/blog/) - Phil Daian, grad student behind KEVM, Hydra, and other Ethereum academic projects
* [Trail of Bits](https://blog.trailofbits.com/) - Cybersecurity R&D firm with a blockchain security practice
* [ConsenSys](https://consensys.net/blog/) - Blockchain software technology company with a well respected blockchain security team
* [Immunefi](https://medium.com/immunefi) - DeFi bug bounty platform. Release post-mortems/write ups of critical vulns and guides
* [Secureum](https://secureum.substack.com/) - Initiative to educate smart contract security auditors. Releases publications on audit techniques and best practices
* [Martin Holst Swende](http://swende.se/) - Martin Swende, programmer and appsec consultant
* [SmartDec blog](https://blog.smartdec.net/) - Company blog about security issues and practices within blockchain ecosystem

### Notable blog posts

* [Hacking the Blockchain: Ethereum](https://medium.com/immunefi/hacking-the-blockchain-an-ultimate-guide-4f34b33c6e8b)
* [Contract upgrade anti-patterns](https://blog.trailofbits.com/2018/09/05/contract-upgrade-anti-patterns/)
* [How the winner got Fomo3D prize — A Detailed Explanation](https://medium.com/coinmonks/how-the-winner-got-fomo3d-prize-a-detailed-explanation-b30a69b7813f)
* [How to debug Solidity Smart Contracts with Tenderly and Truffle](https://medium.com/tenderly/how-to-debug-solidity-smart-contracts-with-tenderly-and-truffle-da995cfe098f)
Expand Down Expand Up @@ -162,6 +171,10 @@ Join Trail of Bits for a free Ethereum Office Hours session by [reserving a slot

* [Enterprise Ethereum Alliance Security Task Force](https://entethalliance.org/working-groups/)
* [Empire Hacking Slack](https://empireslacking.herokuapp.com/) #ethereum
* [SkidsDAO discord](https://discord.gg/NHNRUKMCz2) - DAO founded by [Sleepy](https://twitter.com/morphean_sec) to onboard and train web3 hackers whilst funding projects pushing Ethereum innovation via an inbuilt charity staking system. Facilitates open, accountable audits with exploit insurance and bug bounties through it's decentralized protocol, Fides.
* [Secureum discord](https://discord.gg/7sSTQATM6h) - Founded by 0xRajeev(former Trail of Bits security researcher) to educate the Ethereum ecosystem on smart contract auditing and security. Holds monthly RACE and CARE programmes free of charge for aspiring auditors with NFTs as proof of participation and on-chain rep.
* [Spearbit discord](https://discord.gg/qdYWpHJpnH) - DAO founded by freelance blockchain security researchers to provide an avenue for auditors to perform freelance work without worrying about legality issues.
* [Immunefi discord](https://discord.gg/JPfXR8qFYZ) - Community discord for the Immunefi DeFi bug bounty platform. Hacker meetups are occasionally held. At the time of this writing, samczsun and the Ethernaut have been featured guests.

## Other Awesome Lists

Expand Down