Web3 Security Resources

We built this repo to ensure that everyone has access to security resources. Web3 security is not a sexy topic, but it is essential to have a solid understanding of the basics. Hackers have stolen billions from users with countless damage to web3's reputation in the last several years. This is our contribution to better education.

Contributing

Web3 security is a large field, and we may have missed valuable resources. We are happy to accept suggestions. Please contribute via a Pull Request with any suggestions and include the following:

• Name
• Link to the resource
• Category

---

Analytics & Forensics Tools

• Breadcrumbs
• BscScan
• Chainalysis
• Dune
• Etherscan
• MistTrack
• Metasleuth
• Officer CIA's On-Chain Investigation Tools List
• PolygonScan

Antivirus

• Bitdefender
• Kaspersky
• MalwareBytes

APIs

• Alchemy
• Forta
• GoPlus
• Tenderly

Approval Checkers

• Revoke.cash
• Wallet Guard

Blogs

• BoringSecurity
• Ledger Academy
• SlowMist

Discord Security

• Good Knight Bot
• Hashbot
• Jon_HQ
• Server Forge
• Vulcan
• Wick

Education

• Ledger Academy
• Wallet Guard Academy

Guides

• A Complete Cryptocurrency Security Guide by KoroushAK
• A Developer's guide to the web3 security stack by Coinbase
• Securing Discord Admins by Jon HQ

Hardware Wallets

• Gridlock
• Ledger
• Trezor

Password Managers

• Bitwarden
• KeypassXC

Security Researchers & Investigators

• 0xFantasy
• 0xOhm
• 0xQuit
• 1c4m3by
• BlockChainNinja
• BlockMage
• CryptoShields
• Foobar - [Twitter / Blog]
• Harry Denley - [Twitter / Blog]
• iamdeadlyz
• Nass
• OfficerCIA - [Twitter / Blog]
• Samczsun - [Twitter / Blog]
• Serpent
• WiiMee
• ZachXBT

Security Tooling

• Blowfish
• JoinFire
• Harpie
• Interlock
• Pocket Universe
• Revoke.cash (extension)
• RugPullFinder
• uBlock Origin
• Wallet Guard
• Webacy

VPNs

• TorGuard
• Mullvad
• ProtonVPN

Yearly Reports

• Chainalysis 2023 Crypto Crime Report
• SlowMist 2022 Blockchain Security and AML Analysis Report