Web3-Security-Library - Information about web3 security and programming tu

项目说明

Web3 Security Library

This is a collaborati that aims to contain all the information you need to start or expand your knowledge in web3 security.

Annexure

| Categorisation | Link |
| -------------------------- | --------
| Starting Guides | Inspect
| Blockchain Concepts | Inspect
| Bug Fix Reviews | Inspect
| Hack Analyses | Inspect
| Smart Contracts | Inspect
| Tools | Inspect
| | Inspect
| Check This Out | Inspect
| How to Add Resources | Inspect

Starting Guides:

Hacking the Blockchain: Ethereum

Your First Day as a Bug Bounty Hunter on Immunefi

Blockchain Concepts

- Web3
- EVM
- Non E
- Types of Blockchain Consensus:
- Wallets
- Resources:

Bugfix Reviews

2023

2022

2021

Hack Analyses

2023

2022

Smart Contracts

- Ethereum Machine
- Solidity
- Vyper
- Huff

Tools

Frameworks/ Programming Tools

- Hardhat (JS) EVM
- Truffle (JS) EVM
- Brownie (Python) EVM
- Foundry (Solidity) EVM
- Substrate Polkadot

Blockchain Analysis

Activity Monitoring

Threat Intelligence & On-chain Data:

Scanners & Others:

Other Tools

Resources:

- Logic
- Bad Arithmetics
- Integer underflow/o
- Checks
- Reentrancy
- Uninitialized
- Contracts
- Proxies
- Code injection
- Access Control
- Unprotected functions
- Signature
- Default
- Authentication with tx.origin
- Wrong implementation of standards
- Flashloans
- Oracle manipulation
- Unchecked call return value
- Transaction reorganization (MEV)
- Bad Randomness
- Use of components with known

Check This Out:

- CTFs to Enhance your Solidity Skills
- How to...
- Interviews
- Research Papers
- People to Follow
- Resources from YouTube
- PoC like a pro

How to add Resources?

Please follow the structure of the file you are editing. Whene add a description of the resource you want to share. Send a pull request adding in the comment your Twitter and Discord users to thank you for the contribution and receive XP in the Discord le system.

Plagiarism: Word-for-word copying of portions of another's writing won't be allowed.

项目信息

开发语言：未知

Star 数：2196

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Information about web3 security and programming tutorials/tools展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。