Skip to content

tatbag/blockchain-auditor-edu-guide

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
LICENSE
LICENSE
 
 
README.md
README.md
 
 

Repository files navigation

Ultimate Blockchain Security Auditor's Self-Education Guide

Table of Contents

Introduction

In the rapidly evolving world of blockchain technology, smart contracts have become the backbone of decentralized applications, facilitating secure and transparent transactions. However, their complexity can also make them susceptible to vulnerabilities and risks.

To ensure the robustness of smart contracts and protect user funds, the role of smart contract auditors has grown in significance. These skilled professionals possess a unique blend of blockchain knowledge, programming skills, and security expertise, enabling them to identify and address potential weaknesses in smart contract code.

This document serves as a comprehensive self-education roadmap for aspiring smart contract auditors. It outlines essential topics, valuable resources, and practical exercises to empower auditors in conducting thorough and effective smart contract audits. Whether you're a blockchain enthusiast, a bored-of-development engineer like me, or a security specialist seeking to specialize in smart contract auditing, this roadmap will help you gain the skills needed to kickstart your career in the field. Follow this guide and happy hacking!

P.S: This guide is for people who are already familiar with many computer science topics and are proficient in coding, architecture design, deeply understand networking, TCP/IP concepts, and are at least familiar with information security discipline (protocols, cryptography basics, penetration testing, OWASP). If you feel you're missing something from the list, it would be more efficient if you spend some time understanding the basic topics, then come back.

P.P.S: It would be even more efficient if you gain some knowledge in traditional finances. It would help you understand Defi protocols better and to pentest them more effectively.

Blockchain Fundamentals

These are some useful books I've read to understand the topic, blockchain economy, and blockchain architecture from a technical point of view.

  • “Blockchain: Blueprint for a New Economy” by Melanie Swan.
  • “Beginning Blockchain. A Beginner's Guide to Building Blockchain Solutions” by Bikramaditya Singhal, Gautam Dhameja, Priyansu Sekhar Panda

Ethereum and Solidity Fundamentals

In this section, you can find books and other resources dedicated to Ethereum and the Solidity language (some of them are in Russian language).

Smart Contract Security

One of the most important sections of this guide, books and other resources covering smart contract security, including known vulnerabilities, attack vectors, and best practices.

Defi

The list of resources that helped me get into finance and learn Defi-specific stuff.

Zero Knowledge Protocols

Very interesting and promising subfields of blockchain technology that is a must-read:

Reading Level 2

In this section, you can find a mix of in-depth articles and other types of information related to Ethereum core, smart contract security, coding best practices, design patterns, L2 chains, interesting protocols, tutorials, and public audit reports.

Doing

This section covers all of the hands-on staff including CTF games to learn Solidity and smart contract vulnerabilities, coding tools, and well-known bug bounty programs where you can test your knowledge and start actual pentesting and earning.

Reading Level 3

In this section, I've collected sources for daily reading and learning such as newsletters, channels, and influential figures in the field.

Thanks for using my guide and feel free to contribute!

About

The ultimate blockchain security auditor's self-education guide

Resources

Readme

License

Unlicense license
Activity

Stars

0 stars

Watchers

1 watching

Forks

0 forks
Report repository

Releases

No releases published

Packages

No packages published