Navigation
Tools & Resources
- Tenderly
- Huff Language
- Deth
- Miniscan
- Online Tools
- Online Solidity Decompiler
- OKO CONTRACT EXPLORER
- Ethereum smart contracts approvals dashboard
- Solidity Scan
- Static Analyzer for Solidity
- Solmap
- Remix
- A guide to available tools and platforms for developing on Ethereum
- based.builders
- evm toolkit
- Curated list of best tools for user of Ethereum (DeFi) ecosystem
- A collective list of free APIs
- A curated list of bitcoin services and tools for software developers
- Ethereum Virtual Machine tools and guide
- Smart Contract Allowance Checker
- Local Transaction Debugger
- An Analysis Tool for Smart Contracts
- Fe - Emerging smart contract language for the Ethereum blockchain
- Solidity Visual Developer
- Web3 Ethereum DeFi is a library for smart contracts, DeFi trading (Uniswap, PancakeSwap), Ethereum JSON-RPC, EVM transactions and automated test suites
- A home for ethereum smart contracts
- Ethereum smart contract fuzzer
- Solidity language support and visual security auditor for Visual Studio Code
- Modern, opinionated, and gas optimized building blocks for smart contract development
- About Ethereum transaction visualizer. Generates UML sequence diagram for a transaction's contract calls
- Gas Gauge
- Ethereum Developer Tooling Landscape
- Vanity address generator for Ethereum
- EVM agent-based token simulator
- Forkable Ethereum dev stack focused on fast product iterations
- A simple, maximally extensible, dependency minimized framework for building modern Ethereum dApps
- Web3 Type Converter
- React hook to fetch metadata from any NFT
- Simple, intentionally-limited versions of web3 protocols & apps
- Foundry
- React Hooks for Ethereum
- A toolkit for building on-chain SVG projects
- Dapp, Seth, Hevm, and more
- A tool to generate generative NFT art projects
- Awesome generative art
- A generative art library for NFT avatar and collectible projects
- Ethereum Alarm Clock
- Bootstrapping your personal Web3 info hub from more than 600 RSS Feeds
- A blazingly fast, local, Ethereum block explorer built on top of Erigon
- Build your own blockchain
- AI that reads and explains code in understandable english
- eth95
- DeFi Developer roadmap is a curated Web3.0 Developer handbook which includes a list of the best tools for DApps, development resources and lifehacks
- CryptoDevHub
- dcbuilder
- Dev Community
- EVM Codes
- Crypto Zombies
- Complete Web3.0 And Solidity Development Roadmap
- The Complete Guide to Full Stack Web3 Development
- Solidity Cheatsheets Pack + Bonus
- Solidity
- A compilation of patterns and best practices for the smart contract programming language Solidity
- Solidity Resources by CIA Officer
- Advanced Solidity: Understanding and Optimizing Gas Costs
- Learning Solidity (Everything You Need To Know)
- A curated list of awesome Solidity resources, libraries, tools and more
- Learning Solidity in 30 Days
- The companion to the Youtube tutorials
- Content & Resources to get started on 🛠 Solidity
- Solidity Lists
- A Curated List of Awesome Solidity Resources, Libraries, Tools and more
- Solidity Cheatsheet
- Cheat sheet and best practices for solidity. Write smart contracts for Ethereum
- Solidity Cheat Sheet (DRAFT) by hsoudry
- Solidity Cheat Sheet (2)
- Fuzzing For Memory Bugs In Solidity
- Solidity Patterns
- Solidity library for cross chain calls in Forge tests and scripts
- A web3 educational thread
- All About Solidity — Article Series
- Become a Blockchain Developer
- How to Learn Solidity in 30 Days?
- awesome-solidity
- A list of FREE resources to make Web3 accessible to everyone
- A curated list of Vyper resources, libraries, tools, and more
- Your Roadmap To Becoming A Web 3.0 Developer
- Web 3.0: A Developer Roadmap, Guide, and Resources to Get Started
- “Has Anyone Seen Web3?” — The Complete Roadmap and Resources to Become a Web3 Developer
- How To Get Into Crypto? 2022 Roadmap For A Web3 Developer
- Roadmap to become a web3 developer
- My roadmap in web 3
- A collection of useful resources for Developer DAO members
- A suggested learning path for blockchain development
- A collection about awesome blockchains - open distributed public databases w/ crypto hashes incl. git
- Projects for learning Solidity and Ethereum
- Awesome Airtable
- Intro to Web3 Actions
- Questbook
- Devpill.me - A Public Good Blockchain Development Guide
- Condensed Guide for Learning Web3 Development in 100 Days
- Dapp University
- Web3 Code Challenges
- SpeedRunEthereum
- ETH.Build
- Crash course of 16 high quality resources, tutorials, and videos
- How to Get Into Crypto and Web3 as a Developer
- Building GraphQL APIs on Ethereum
- The Complete Guide to Full Stack Solana Development with React, Anchor, Rust, and Phantom
- How to Build a Full Stack NFT Marketplace - V2
- The Ultimate, Learn Blockchain Development, Solidity, Full-stack Web3, & Smart Contract Course | Javascript (& Typescript) Edition on FreeCodeCamp
- Curated list of resources for the development and applications of blockchain
- The contents of this repository will help you launch a career in Blockchain development. How to deploy Smart contracts on Ethereum, build DApps, DeFi, DAO, NFT and Token protocol
- Ethereum-lists
- Web3.py
- Learn Blockchain, Solidity, and Full Stack Web3 Development with Javascript
- Ultimate roadmap for web3 developers "from zero to master"
- Must-Reads
- Nader’s web3 Resources for Developers
- A curated list of resources for blockchain engineers
- The ultimate Ethereum dev community list
- Here are 5 resources to help you become a (better) web3 dev
- Going the distance - A blog about blockchains and smart contracts development
- Devansh's Blog
- Thirteen incredible GitHub repositories to help you learn everything about blockchain
- A basic introduction to web3 and its concepts, using the JavaScript you already know
- Buildspace
- Vyper for Beginners — Toolkit
- A guidebook of links for research topics in the Ethereum R&D Discord
- Understanding EVM
- "Here is a thread of my 17 favorite videos & guides"
- The EVM Handbook
- Subgraph Developer Course
- Ultimate Solidity, Blockchain, and Smart Contract - Beginner to Expert Full Course | Python Edition
- A curated list of awesome decentralized finance projects
- Awesome Ethereum Resource Lists
- 5 Skills A Great Smart Contract Developer Must Master
- Solidity Smart Contracts Samples
- Building full stack apps with Solidity, Ethers.js, Hardhat, and The Graph
- Best resources for Solidity gas optimizations ⛽
- "Huff, the most gas-optimized smart contract language to ever touch the EVM"
- Solidity gas optimizations and tricks
- Reversing and debugging EVM Smart contracts: Deployment of a smart contract
- Inking a Smart Contract
- A collection of EVM puzzles
- 10 More EVM Puzzles
- List of awesome Smart-contract-examples github repositories, issues and users
- How to Read Smart Contracts
- A Survey of Tools for Analyzing Ethereum Smart Contracts
- SmartBugs: A Framework to Analyze Solidity Smart Contracts
- A compilation of smart contracts I find cool/fun/interesting
- Curated collection of blockchain & cryptocurrency resources
- Curated list of Ethereum infographics - L1, L2, Oracles, DeFi
- How To Build Developer Relationship in Web3
- Solana Ultimate Tools Pack for Developers & DeGens
- A list of ideas for cool stuff to build
- A curated list of cryptography resources and links
- "wanna learn smart contract gas optimization? lots of open issues on my repo, will help you learn if you contribute"
- EVM nodes: A dive into the full vs. archive mode
- Getting Started w/ Solana
- Building a Web3 Authentication Flow
- Building with Arweave
- Defining the web3 stack
- "So you want to be a blockchain developer?"
- Thirteen Incredible GitHub Repositories To Leverage Your Blockchain Learning
- How I became a Web3 dev in just 7 days and got my first 8000$ Web3 contract
- How to become a blockchain developer
- Web3 Tutorial: Build an NFT marketplace DApp like OpenSea
- EVM's best explanations, guides, and implementations
- Ethereum EVM illustrated
- Oracle Networks: A Deep Dive Into Data Bridging Solutions
- A book about Ethereum
- An Effective Way To Build Your Own Oracle With Solidity
- Tenderly App — a Swiss Pocketknife for the Web3 developer
- A complete course for learning Bitcoin programming and usage from the command
- Understand EVM bytecode
- Awesome list of all things oracle manipulation. Creating to help spread a better understanding of oracles and oracle manipulation
- Run your own local Front-End from zero to hero
- "I'm sharing everything I'm learning to become a Blockchain Engineer"
- This is the code for "Learn Blockchain in 2 Months" by Siraj Raval on Youtube
- Gas Numbers Every Solidity Dev Should Know
- VyperExamples
- "If your in Crypto and you want to start coding (or already have), here are 6 great resources for you"
- Learning a new language? Write a cheat sheet. And an article
Tools & Websites
- Breadcrumbs - Investigation Tool
- dangerzone.rocks
- RugScreen
- Ultimate DeFi & Blockchain Research Base
- RugCheck
- Wallet Validator
- Honeypot Token Checker
- Blockchair
- ETHDecoder
- Another Wallet Validator
- Blockchain Explorer
- BlockCypher
- HAL.xyz
- GraphSense
- Crystal Explorer
- Wallet Explorer
- Bitcoin Abuse
- BitcoinWhosWho
- Check Bitcoin Address
- Scam-Alert
- Cryptscam
- BitRankVerified
- Cryptocurrency Alerting
- Crypto Transaction Alert
- Know Your Coin Privacy
- Blockstream
- OXT
- badkeysinfo
- Playxo
- Keys lol
- heyanon!
- Web3 Security
- GetBlock
- Sweeposaurus
- Impersonator
- MistTrack
- CryptoScamDB
- AML Bot
- Air-Gap Coomputer
- BSCheck
- learn me a bitcoin
- Blockchain Explorers
- TxStreet
- Blockscout
- AlphaWallet
- Electrum
- Sparrow Bitcoin Wallet
- Ethernal
- Wallet Scrutiny
- Sarcophagus
- SafeHaven
- VeraCrypt
- The Ethernaut
- Frame
- Review of Tools for Analyzing Security Vulnerabilities in Ethereum based Smart Contracts
- A Docker container preconfigured with all of the Trail of Bits Ethereum security tools
- AirGap
- Blockchain Transactions Investigation Tool
- An open source Bitcoin wallet password and seed recovery tool designed for the case where you already know most of your password/seed, but need assistance in trying different possible combinations
- Blockchain 3D Explorer
- TX Analysis tools
- Top 20 blockchain analysis and crypto investigation tools that you can trust
- A Short List of the Rug Checker Tools
- BitcoinAIS
- Wallet Rating & Analysis
- Bad Bitcoin
- Bitcoin (BTC) OSINT investigations tools
- Ethereum (ETH) OSINT investigations tools
- Rapid Smart Contract Crawler
- OpenZeppelin
- A guide to available tools and projects for analyzing and managing risk within DeFi
Learn & Read
- CIA Officer (start.me)
- Cryptocurrency OSINT
- Crypto-OpSec-SelfGuard-RoadMap
- Ethereum Research
- Ethereum Magicians forum
- HackerNoon
- Multisig Best Practices
- How to Securely Manage Company Crypto Funds with Gnosis Safe Multisig
- Backdooring Gnosis Safe Multisig wallets
- Build a treasury wallet with multisignature Gnosis Safe
- Multisignature Wallets Can Keep Your Coins Safer (If You Use Them Right)
- A curated list of blockchain security Capture the Flag (CTF) competitions
- Capture the Ether
- A Survey on Metaverse: Fundamentals, Security,and Privacy
- Trail of Bits Thread
- How To Use Linux LUKS Full Disk Encryption For Internal / External / Boot Drives
- Crypto Opsec: Browser (in)security to security
- Awesome Solana Security resources
- A Guide to NFT Platform Security
- Damn Vulnerable DeFi
- DeFi Security: Best Practices + Security Q&A
- ETHSecurity Recap
- Blockchain Security
- A collection of resources to study Solana smart contract security, auditing, and exploits
- Criteria for evaluating Bitcoin wallets' privacy properties
- Blockchain security guide
- Crypto wallets security as seen by security engineers
- Here are 9 attack patterns in DeFi that everyone should know
- EthClipper: A Clipboard Meddling Attack on Hardware Wallets with Address Verification Evasion
- On Operational Security
- Avoiding Rug Pulls at Web3, Part 1: Tech
- Avoiding Rug Pulls at Web3, Part 2: Social Engineering
- Simplified Roadmap for Blockchain Security
- On Privacy Thread
- Master Thread on Crypto/Web3 Security
- Damn Vulnerable DeFi - Foundry Version
- Smart Contract Security Verification Standard
- A survey of attacks on Ethereum smart contracts
- SMART CONTRACT SECURITY CHECKLIST
- Ethereum-Smart-Contracts-Security-CheckList
- A curated list of awesome Ethereum security references
- Smart Contract Vulnerabilities (SCV) List
- To learn common smart contract vulnerabilities using Foundry!
- Smart Contract: Attacks and Protections
- Sherlock x Secureum CTF
- NFT Security Collection
- ETHSec Tools
- Data: All known smart contract attacks and vulnerabilities
- Research Summary: Blockchain is Watching You: Profiling and Deanonymizing Ethereum Users
- Embedded Blockchains: A Synthesis of Blockchains, Spread Spectrum Watermarking, Perceptual Hashing & Digital Signatures
- Analyze and reproduce attack events or vulnerabilities in the blockchain world
- Crypto legal risk checklist
- A Collaborative DDoS Mitigation Solution Based on Ethereum Smart Contract and RNN-LSTM
- Follow this quality checklist before an audit
- Ethereum smart contract security checklist
- Opinionated security and code quality standard for Solidity smart contracts
- A Solidity smart contract auditing checklist
- Smart Contract Security Verification Standard
- What is a security audit, when you should get one, and how to prepare
- Simple Security Toolkit
- How To Read A Smart Contract Audit Report
- List of discord communities you must join if learning block sec
- Per Aspera ad Astra: How to become a smart contract auditor | Notes
- ETHSec Tools
- Security Innovation Blockchain CTF
- Common Vulnerabilities in Smart contracts
- How to not suck at an audit
- Auditor List
- Introduction to smart contract security and hacking in Ethereum
- Smart Contract Security Publications
- If you have non-trivial amounts of money in crypto, no excuse for not having a hardware wallet
- OpSec guide
- Learning Best Practices from Web Applications to Avoid Similar Security Vulnerabilities in Decentralized Applications
- Top 10 DeFi Security Best Practices
- A collection of practical security-focused guides and checklists for smart contract development
- AuditorsRoadmap
- A systematic literature review of blockchain cyber security
- Research Summary: A Systematic Literature Review of Blockchain Cyber Security
- Re-entrancy attack patterns from our paper "Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks"
- The purpose of this repo is to list all the related Research Papers focused on Smart-contracts security topics. As well as listing all the encountered smart-contracts defects with a summary description
- SMART CONTRACTS: VULNERABILITIES AND REAL ATTACKS
- Solidity Security: Comprehensive list of known attack vectors and common anti-patterns
- Materials related to security: docs, checklists, processes, etc
- Blockchain and Smart Contract Security
- Smart Contract Security Guidelines #3: The Dangers of Price Oracles
- Smart Contract Security for Pentesters
- What’s in Your Wallet? Privacy and Security Issues in Web 3.0
- EEA EthTrust Security Levels Specification v1
- Comprehensive list of known attack vectors and common anti-patterns
- Key principles of storing cryptocurrency securely
- How I investigate cypto hacks and secuity incidents, and describe methodolgy bu CIA Officer
- CIA Officer Thread
- Preventing transaction reordering manipulations in DeFi
- A Blockchain-Based Architecture for Collaborative DDoS Mitigation with Smart Contracts
- A globally-accessible knowledge base of adversary tactics and techniques based on real-world observations on decentralized finance
- The role of Blockchain in DDoS attacks mitigation: techniques, open challenges and future directions
- Ethereum Smart Contract Security Best Practices
- All known smart contract-side and user-side attacks and vulnerabilities in Web3.0, DeFi, NFT and Metaverse + Bonus
- With Rektosaurus you can inspect websites that display NFTs for user-side attacks including script injection
- Ultimate crypto scoring & tracking pack
- Getting started with Monero + Bonus
- CIA Officer Thread
- One More
- Practical Deanonymization Attack in Ethereum Based on P2P Network Analysis
- Do you want to become an on-chain detective?
- Cryptocurrency Investigations 101
- Cross-chain bridge attacks: A-Z
- Cryptocurrencies and money laundering investigations
- Not an APT Average: Grand Theft Bitcoin
- How to advertise Crypto where it is prohibited
- 2 Violent attack vectors in Crypto: a detailed review
- Known Physical Bitcoin Attacks
- Another Thread
- A mega-thread about smart contract-side and user-side attacks in Dapp, Web3, Blockchain, DeFi, NFT and Metaverse
- Flash Crash for Cash: Cyber Threats in Decentralized Finance
- From Zapper Post-Mortem to using Front-run in project defense. Theory post
- Per Aspera ad Astra: How to become a smart contract auditor & bugbounty-hunter
- How I investigate crypto hacks and security incidents: A-Z
- OpSec in Crypto: Thoughts
- This thread will show you how you can catch web3 hackers/scammers using OSINT techniques
- Blockchain Scaling Researches
- How to track influencer wallet addresses - NO python, NO API calls, NO coding needed. Only prerequisite is excel
- Blockchain Development and Security
- Here’s how to become an Etherscan pro
- AMLBot: determine the purity of cryptoassets and the origin of coins
- Interesting Article
- This paper makes the first exhaustive attempt to identify and define the properties of all physical and digital forms of money
- Blockchain educational resources curated by the OpenZeppelin team
- Decentralize It! Tor link
- A list of several bots
- Thread about OPSEC in crypto
- Irrefutable cases of civilian use of OSINT
- How crypto gets stolen
- How To Investigate Cryptocurrency Crimes Using Blockchain Explorers & OSINT Tool
- Hack Solidity: Reentrancy Attack
- New doxxing method discovered!
- Scavenging: Don’t be too kind
- MetaMask Clickjacking Vulnerability Analysis
- What To Know About Cryptocurrency and Scams
- Critical privacy vulnerability — getting exposed by MetaMask
- Cryptocurrency isn’t private—but with know-how, it could be
- Phantom Functions and the Billion-Dollar No-op
- Crypto WiFi Hack – How it Works
- Frontrunning
- Exploring Commit-Reveal Schemes on Ethereum
- MacOS + IOS + Crypto + Security = ? | Top 10 security tips for Apple Device users by Officer_CIA
- Officer_CIA: Retrospective
- How to win the war, trick the KGB and protect your crypto-assets from theft by Steganography
- How to Steal $100M from Flawless Smart Contracts
- A Collection of Risks and Vulnerabilities in ERC20 Token Contracts
- Cross-Contract Reentrancy Attack
- How to Make a Flash Loan using Aave
- How to make a jump from Web2 hacking to Web3 hacking?
- Arthur Hacked Research
- CRYPTOHACK
- 6 Ways a Site Can Attack your MetaMask
- Hacking EthGlobal: Strength in numbers to RCE
- Here are 5 security practices you should look for when sizing up a project
- Android-based Cryptocurrency Wallets: Attacks and Countermeasures
- Hacking Web3: Introduction and How to Start
- How hackers may steal your Ethers and why does eth_sign function matter?
- List of Breach Vectors Hackers Exploit to Steal Cryptocurrency
- The Dark Side of DeFi: Cross-Chain Bridge Hacks
- A thread on some obscure knowledge, on things you don’t know you don’t know
- Spoofing, Sweepers, and Clipboard Hacks: How To Stay Safe From Scams
- List of Security Vulnerabilities
- Semgrep rules for smart contracts based on DeFi exploits
- Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!
- Laplace's Demon Speaks: Is there a life in blockchain?
- 25 OpSec tips
- Why OpSec in general and Counter-OSINT in particular are important? Let’s take a look
- Learning Blockchain Hacking/Auditing
- Hacking the Blockchain: Ethereum
- Someone overheard me! Why it's important to think about all attack vectors, even if they seem unlikely to happen?
- Private key safety
- Monolithic wallets — The Achilles heel of web3 security
- Uncle Maker: (Time)Stamping Out The Competition in Ethereum
- Thread by ZachXBT
- Investigating transactions in cryptocurrencies
- 7 ways to level up your Bitcoin OpSec
- Bounty Spreadsheet
- Ethereum Blacklist
- Ethernal x Tenderly
- ElectAnon: A Blockchain-Based, Anonymous, Robust and Scalable Ranked-Choice Voting Protocol
- On-Chain Privacy
- 30+ NFT-based projects built with NFTPort at HackFS Hackathon
- Hacker tools for recovering old BTC wallets from old devices
- QR Code: An Underestimated Danger
- Deanonymisation of Clients in Bitcoin P2P Network
- Evaluating User Privacy in Bitcoin
- A fistful of bitcoins: characterizing payments among men with no names
- Bitcoin Address Clustering Method Based on Multiple Heuristic Conditions
- Bitcoin Transaction Graph Analysis
- When the cookie meets the blockchain: Privacy risks of web payments via cryptocurrencies
- Fundamentals of OpSec in Crypto
- This is how you can protect your cryptocurrencies from hackers
- BITCOIN SECURITY & RESOURCES
- 5 Tips to Prevent Hackers From Stealing Your Crypto Assets
- Knowing Your Coin Privacy (Using KYCP.org)
- How to Stay Safe on the Internet: A Guide for Crypto Users
- CryptoSec
- DeFiSec
- DeFiSec 2
- Bad Actors Abusing ERC20 Approval to Steal Your Tokens!
- What is a logic bomb and how can it be used?
- A clipboard meddling attack on hardware wallets with address verification evasion - Good Read!
- How Your Metamask Got Hacked (Probably)
- "You've been asking me for a long time and finally I decided to write an ultimative thread on an advanced (and authorial, please note) cryptocurrency storage technology"
- A summary of 100+ CTF blockchain challenges
- A curated list of awesome resources and projects that concern blockchain interoperability
- What to do if you think someone has hacked you? A big thread
- DeFi Protocol Risks: The Paradox of DeFi
- the cryptopals crypto challenges
- CIA Officer's very-special compilation of amazing Anonymity, OpSec & Privacy guides!
- A thread of interesting Paradigm CTF writeups
- Solutions to paradigm CTF
- Paranoid's library contains implementations of checks for well known weaknesses on cryptographic artifacts
- An ultimate list of rules any on-chain survivor should follow to stay safe!
- Public reports of performed audits
- A Quick Guide to Hack private variables in Solidity
- Foundry Cheatsheet
- List of resources to learn smart contract hacking
- Secureum Bootcamp
- The Ultimate Smart Contract Auditing Guide
- The Best Smart Contract Auditors: Ranked
- REKT Leaderboard
- Smart Contract Weakness Classification and Test Cases
- JiuZhou is a data set of Ethereum bug smart contracts (ICSME 2020)
- the magic X-ray machine for solidity smart contracts
- A curated list of web3Security materials and resources For Pentesters and Bug Hunters
- A Tool for clone detection and bug detection in smart contracts
- SmartEmbed: A Tool for Clone and Bug Detection in Smart Contracts through Structural Code Embedding
- DApp Frontend Security
- A checklist detailing DevSecOps practices for EVM-based projects
- A collection of smart contract attack vectors along with prevention methods
- A Survey of Security Vulnerabilities in Ethereum Smart Contracts
- Smart Contract Weakness Classification and Test Cases
- Smart Contract Development and Auditor Roadmap
- A guide to smart contract security best practices
- How to become a smart contract auditor
- Guidelines and training material to write secure smart contracts
- List of Ethereum Smart Contracts Post-Mortems
- Interesting Thread
- Clockwork Finance: Automated Analysis of Economic Security in Smart Contracts
- FASTEN: Fair and Secure Distributed Voting Using Smart Contracts
- Distinguishing EOA and Smart Contracts Securely
- Hacking Cryptocurrency Miners with OSINT Techniques
- Targeting the Weakest Link: Social Engineering Attacks in Ethereum Smart Contracts
- The ultimate Ethereum dev community list
- Smart Contract Research Forum
- A place where you can enhance your Security Skills by solving and learning from CTF like challenges. The challenges will be targeted towards Blockchain Security, Smart Contract Exploitation, and Cryptography
- Contracts Wizard
- Introduction to Ethereum Security
Cases
- Compound Incident Analysis
- Fei Bonding Curve Bug Post Mortem
- Fei Protocol Flashloan Vulnerability Bugfix Review
- Nomad Case
- Slope app
- Interesting Thread
- "Hackers emptied Ethereum wallets by breaking the basic infrastructure of the internet"
- Hackers blackmail exchange with $5 million of Ethereum fees - report
- "Been reading a ton of DeFi Audits the last couple weeks; there are some report design/structures I'd really like to see more"
- Thread on how to learn about how the attack works, how to protect yourself, and some basic malware analysis
- This thread will show you how you can catch web3 hackers/scammers using OSINT techniques
- Brief analysis of Zabu Finance being hacked
- VEE.Finance Attack Analysis
- Interesting Thread
- Guidelines and training material to write secure smart contracts
- AN UN-SOL-VED MYSTERY
- What does an inflationary DeFi protocol do when it runs out of tokens to pay out rewards?
- Uniswap bug causes loss of ETH
- deBridgeFinance has been the subject of an attempted cyberattack, apparently by the Lazarus group
- Just came across an evolution of an old YouTube scam that was quite interesting. It's netted the creator over $30,000 in just over 24 hours. A thread on how it works & the new innovations in this particular version of it
- Took a quick look at the RektHQ leaderboard and made a summary of hacked protocols and their auditors
- Today I nearly got caught by a fascinating and devious crypto scam during an OTC transaction. Read on to learn what happened, so you can avoid it happening to you
- 6 Ways a Site Can Attack your MetaMask
- Hackers and fraudsters used crypto bridge RenBridge to launder $540 million
- Curve Finance Hack Incident Analysis
- TradFi, Meet DeFi: Breaking Down the Economics of DeFi Hacks
- ACALA NETWORK - REKT
- "Over the past two weeks, we’ve worked closely with slope_finance, phantom, and solana to investigate the root cause of the drained wallets. Here’s what we found"
- Web3 Extension Malware
- "Do you know a simple signature in Metamask can drain your wallet?"
- Ronin Bridge - This thread will illustrate the tracking analysis procedures
- Hackers steal crypto from Bitcoin ATMs by exploiting zero-day bug
- Uniswap V3 — — New Phishing Scam?
- Recovering Assets from a Hacked Account with Flashbots
- DeFi Attack
- DeFi Exploits: Trends, Patterns, and Lessons Learnt
- Harvest Flashloan Economic Attack Post-Mortem
- Interesting Thread
- Comprehensive List of DeFi Hacks & Exploits
- Audit Database
- Smart Contract security audit reports
- The 2022 Crypto Crime Report
Tools & Resources
- Node providers
- Nodes Guru
- Termius
- htop.dev
- Glances
- FileZilla
- Regularly updated list of Bitcoin-friendly VPS, dedicated server, VDS, VPN, and email providers
- A curated list of awesome Node providers and public PRC endpoints for Ethereum, BSC, Gnosis (xDAI), Fantom, Avalanche, KuCoin, Fuse, Harmony, Tezos, IoTeX, Arbitrum, Optimism and more
- Docker
- Grafana