Everybody is winging it, all the time.
I probably suffer a tiny bit from imposter syndrome, so I find it hard to commit myself to consistently write articles (however minimal they might even be). But then again:
So here it goes, below you can find yet another list of resources I have come across on my adventures on the world wide web.
Some of these links I can already scratch from the list ✔️😊.
I am still thinking about:
- How to best structure posts. One aspect is that alot of these resources are also on other's guides (e.g. see Introduction to smart contract security and hacking), but I don't think it's a big issue. Each of these items is worthy of a blog post, as there is alot of content to cover.
- I reckon the Publii theme I've chosen is not the most sensible one from a UX perspective (especially on mobile), but I'll see how it goes... 🙈
General
- https://kernel.community/module-0/ (✔️->article)
- https://github.com/trufflesuite/ganache-cli-archive
- https://ethereum.org/en/developers/learning-tools/
- https://matterlabs.notion.site/matterlabs/Matter-Labs-Team-Handbook-43342b471fe14f05b2baf250cb7c7a02
- https://medium.com/matter-labs/evaluating-ethereum-l2-scaling-solutions-a-comparison-framework-b6b2f410f955
- https://cryptodevhub.io/wiki/blockchain-development-tutorial
- ETH.BUILD: https://www.youtube.com/playlist?list=PLJz1HruEnenCXH7KW7wBCEBnBLOVkiqIi
- The sorry state of DeFi security: https://youtu.be/6iJC-1meyYU
- https://github.com/sherminvo/TokenEconomyBook (✔️-> article)
- https://github.com/dethcrypto/ethereum-code-viewer
- https://github.com/OffcierCia/DeFi-Developer-Road-Map (✔️-> article)
- https://www.learnweb3.io
Security
- https://media.consensys.net/time-sure-does-fly-ed4518792679#.r5e4xnbph
- https://www.damnvulnerabledefi.xyz/ (✔️-> article)
- https://docs.openzeppelin.com/contracts/4.x/
- https://docs.openzeppelin.com/learn/developing-smart-contracts
- https://docs.soliditylang.org/en/latest/security-considerations.html#
- https://github.com/guylando/KnowledgeLists/blob/master/EthereumSmartContracts.md https://dasp.co/#item-1
- https://cryptoservices.github.io/
- https://github.com/sigp/solidity-security-blog/blob/master/README.md
- https://consensys.net/blog/developers/the-smart-contract-security-mindset/
- https://consensys.net/blog/blockchain-development/ethereum-smart-contract-security-recommendations/
- https://consensys.net/blog/developers/solidity-best-practices-for-smart-contract-security/
- https://blog.openzeppelin.com/the-hitchhikers-guide-to-smart-contracts-in-ethereum-848f08001f05/
- https://research.nccgroup.com/wp-content/uploads/2020/03/NCC-Group-Whitepaper-Coinbugs.pdf
- https://github.com/PeterBorah/smart-contract-security-examples/issues/3
- https://medium.com/@peterborah/we-need-fault-tolerant-smart-contracts-ec1b56596dbc
- https://blog.ethereum.org/2016/06/19/thinking-smart-contract-security/
- https://blog.ethereum.org/category/security/
- https://hackingdistributed.com/2020/03/11/flash-loans/ + https://hackingdistributed.com/2016/07/13/reentrancy-woes/
- https://media.consensys.net/time-sure-does-fly-ed4518792679
- https://cryptoconsortium.github.io/CCSS/
- https://www.pentestpartners.com/security-blog/blockchain-implementation-security-a-hardening-how-to/
- https://matterlabs.notion.site/Best-Practices-69868a3105e04ba0b5e15e94ea27bfc6
- https://consensys.github.io/smart-contract-best-practices/ (✔️->article)
- https://github.com/fravoll/solidity-patterns
- https://secureum.substack.com/p/smart-contract-security-101-secureum
- https://chain.link/bootcamp/bootcamp-2021-on-demand (see chapter regarding smart contract security)
- https://secureum.substack.com/p/smart-contract-security-resources (✔️->article)
- https://github.com/securing/SCSVS (✔️-> article)
- https://github.com/SmartContractSecurity/SWC-registry
- https://www.notonlyowner.com/learn/intro-security-hacking-smart-contracts-ethereum (✔️->article)
- https://github.com/tintinweb/smart-contract-sanctuary
- https://yacademy.substack.com/p/yacademy-newsletter-1 (✔️->article)
- https://swcregistry.io/
- https://rinkeby.etherscan.io/address/0xffb9205c84d0b209c215212a3cdfc50bf1cfb0e0#code + https://twitter.com/samczsun/status/1451236190917701636 (✔️->article)
- https://github.com/KadenZipfel/smart-contract-attack-vectors
- https://github.com/Rari-Capital/solcurity
- https://medium.com/immunefi/the-web3-security-revolution-ec33ea7a85f8
- Do a write-up or quick start guide of some well known code analyzers (e.g. Slither, Mythril, Echidna, Manticore, ...)
- https://www.useweb3.xyz/ (#lists)
- https://dev.to/dabit3/the-complete-guide-to-full-stack-ethereum-development-3j13
- https://solidity-by-example.org/
- Learning Solidity: https://www.youtube.com/playlist?list=PL16WqdAj66SCOdL6XIFbke-XQg2GW_Avg
- https://github.com/bkrem/awesome-solidity (✔️ -> article)
- https://www.smartcontract.engineer/challenges (Solidity & Vyper)
- https://github.com/securing/SCSVS/tree/prerelease/SCSVSv2 (✔️-> article)
- https://medium.com/immunefi/hacking-the-blockchain-an-ultimate-guide-4f34b33c6e8b (✔️ -> article)
- https://devansh.xyz/blockchain-security/2021/09/13/genesis.html (✔️-> article)
- https://www.ethsecurity.org/ + https://docs.google.com/document/d/1ATN1jKfG0gloxyEE8qyUMn4l5orkHp3QHK1-6C-rzyY/edit
- https://github.com/Certora/Tutorials + https://certora.atlassian.net/wiki/spaces/CPD/pages/2916673/Getting+started
- https://entethalliance.github.io/crosschain-interoperability/crosschainsecurityguidelines.html#sec-introduction (✔️-> article)
- DeFi MOOC Lecture 12 Premiere: Practical Smart Contract Security by samczsun
- CTF's: https://twitter.com/arunim_shukla/status/1532263207146262529?s=20&t=ax0dTGnmYqb8ZrUIdYrDiQ
- https://start.me/p/QRg5ad/officercia
- https://github.com/SunWeb3Sec/DeFiHackLabs
EVM
- https://eth.wiki/en/concepts/evm/ethereum-virtual-machine-(evm)-awesome-list
- https://takenobu-hs.github.io/downloads/ethereum_evm_illustrated.pdf (✔️->article)
- https://blog.qtum.org/diving-into-the-ethereum-vm-6e8d5d2f3c30
- https://consensys.net/blog/blockchain-explained/
- https://consensys.net/blog/blockchain-explained/want-to-really-understand-blockchain-you-need-to-understand-state/
- https://media.consensys.net/ever-wonder-how-merkle-trees-work-c2f8b7100ed3
'Everybody is winging it, all the time', I came across this saying a couple of years ago and it resonated with me. It still does, after all these years. A quick search brought me back to the Hacker News post discussing the (seemingly original) Guardian article "Everyone is totally just winging it, all the time".
Photo by David Pupaza on Unsplash.