Web3-Tech

KO | EN

gitlite — search

#typescript #llm #android #machine-learning #deep-learning #docker #macos #nodejs #java #kubernetes #awesome-list #mcp #ios #openai

(★ 14)

Selection of Web3 Tech tools & resources (will be updated regularly) ⚙️

Web3-Tech 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Web3-Tech

Navigation

- [Web3 Tech](#web3-tech)
    - [Code](#code)
    - [Security](#security)
    - [Nodes and Testnets](#nodes-and-testnets)

- - -

## Code

*Tools & Resources*

* [Tenderly](https://tenderly.co/)
* [Huff Language](https://huff.sh/)
* [Deth](https://www.deth.net/)
* [Miniscan](https://miniscan.xyz/)
* [Online Tools](https://emn178.github.io/online-tools/index.html)
* [Online Solidity Decompiler](https://ethervm.io/decompile)
* [OKO CONTRACT EXPLORER](https://oko.palkeo.com/)
* [Ethereum smart contracts approvals dashboard](https://approved.zone/)
* [Solidity Scan](https://solidityscan.com/)
* [Static Analyzer for Solidity](https://github.com/crytic/slither)
* [Solmap](https://solmap.zeppelin.solutions/)
* [Remix](https://remix-project.org/)
* [A guide to available tools and platforms for developing on Ethereum](https://github.com/ConsenSys/ethereum-developer-tools-list#monitoring)
* [based.builders](https://based.builders/web3/%F0%9F%92%BB+Development)
* [evm toolkit](https://github.com/quilt/etk)
* [Curated list of best tools for user of Ethereum (DeFi) ecosystem](https://github.com/gweicz/defi-toolkit)
* [A collective list of free APIs](https://github.com/public-apis/public-apis#cryptocurrency)
* [A curated list of bitcoin services and tools for software developers](https://github.com/igorbarinov/awesome-bitcoin)
* [Ethereum Virtual Machine tools and guide](https://github.com/CoinCulture/evm-tools)
* [Smart Contract Allowance Checker](https://app.unrekt.net/)
* [Local Transaction Debugger](https://library.dedaub.com/localTransactionDebugger)
* [An Analysis Tool for Smart Contracts](https://github.com/enzymefinance/oyente)
* [Fe - Emerging smart contract language for the Ethereum blockchain](https://github.com/ethereum/fe)
* [Solidity Visual Developer](https://marketplace.visualstudio.com/items?itemName=tintinweb.solidity-visual-auditor&ssr=false#overview)
* [Web3 Ethereum DeFi is a library for smart contracts, DeFi trading (Uniswap, PancakeSwap), Ethereum JSON-RPC, EVM transactions and automated test suites](https://github.com/tradingstrategy-ai/web3-ethereum-defi#readme)
* [A home for ethereum smart contracts](https://github.com/tintinweb/smart-contract-sanctuary)
* [Ethereum smart contract fuzzer](https://github.com/crytic/echidna)
* [Solidity language support and visual security auditor for Visual Studio Code](https://github.com/ConsenSys/vscode-solidity-auditor)
* [Modern, opinionated, and gas optimized building blocks for smart contract development](https://github.com/transmissions11/solmate)
* [About Ethereum transaction visualizer. Generates UML sequence diagram for a transaction's contract calls](https://github.com/naddison36/tx2uml)
* [Gas Gauge](https://gasgauge.github.io/)
* [Ethereum Developer Tooling Landscape](https://www.landscape.dappcamp.xyz/)
* [Vanity address generator for Ethereum](https://github.com/johguse/profanity)
* [EVM agent-based token simulator](https://github.com/tokenspice/tokenspice)
* [Forkable Ethereum dev stack focused on fast product iterations](https://github.com/scaffold-eth/scaffold-eth)
* [A simple, maximally extensible, dependency minimized framework for building modern Ethereum dApps](https://github.com/Uniswap/web3-react)
* [Web3 Type Converter](https://web3-type-converter.onbrn.com/)
* [React hook to fetch metadata from any NFT](https://github.com/spectrexyz/use-nft)
* [Simple, intentionally-limited versions of web3 protocols & apps](https://github.com/m1guelpf/lil-web3)
* [Foundry](https://github.com/foundry-rs)
* [React Hooks for Ethereum](https://github.com/wagmi-dev/wagmiwha)
* [A toolkit for building on-chain SVG projects](https://github.com/w1nt3r-eth/hot-chain-svg)
* [Dapp, Seth, Hevm, and more](https://github.com/dapphub/dapptools)
* [A tool to generate generative NFT art projects](https://github.com/NotLuksus/nft-art-generator)
* [Awesome generative art](https://github.com/kosmos/awesome-generative-art)
* [A generative art library for NFT avatar and collectible projects](https://github.com/rounakbanik/generative-art-nft)
* [Ethereum Alarm Clock](https://www.ethereum-alarm-clock.com/)
* [Bootstrapping your personal Web3 info hub from more than 600 RSS Feeds](https://github.com/chainfeeds/RSSAggregatorforWeb3)
* [A blazingly fast, local, Ethereum block explorer built on top of Erigon](https://github.com/wmitsuda/otterscan)
* [Build your own blockchain](https://github.com/nambrot/blockchain-in-js)
* [AI that reads and explains code in understandable english](https://denigma.app/#demo)
* [eth95](https://eth95.dev/)
* [DeFi Developer roadmap is a curated Web3.0 Developer handbook which includes a list of the best tools for DApps, development resources and lifehacks](https://github.com/OffcierCia/DeFi-Developer-Road-Map)
* [CryptoDevHub](https://cryptodevhub.io/)
* [dcbuilder](https://dcbuilder.dev/)
* [Dev Community](https://dev.to/)
* [EVM Codes](https://www.evm.codes/)
* [Crypto Zombies](https://cryptozombies.io/en/course)
* [Complete Web3.0 And Solidity Development Roadmap](https://vitto.cc/web3-and-solidity-smart-contracts-development-roadmap/)
* [The Complete Guide to Full Stack Web3 Development](https://twitter.com/dabit3/status/1491752835016441860)
* [Solidity Cheatsheets Pack + Bonus](https://telegra.ph/Solidity-Cheatsheets-Pack-03-20)
* [Solidity](https://soliditydocsst.readthedocs.io/en/stable/index.html#)
* [A compilation of patterns and best practices for the smart contract programming language Solidity](https://github.com/fravoll/solidity-patterns)
* [Solidity Resources by CIA Officer](https://twitter.com/officer_cia/status/1519357579788525568)
* [Advanced Solidity: Understanding and Optimizing Gas Costs](https://www.udemy.com/course/advanced-solidity-understanding-and-optimizing-gas-costs/)
* [Learning Solidity (Everything You Need To Know)](https://medium.com/coinmonks/730d-solidity-language-q2-2022-ea968098179)
* [A curated list of awesome Solidity resources, libraries, tools and more](https://github.com/bkrem/awesome-solidity)
* [Learning Solidity in 30 Days](https://devansh.xyz/blockchain-security/2021/10/16/genesis-0x04.html)
* [The companion to the Youtube tutorials](https://github.com/willitscale/learning-solidity)
* [Content & Resources to get started on 🛠 Solidity](https://github.com/ialoig/solidity-content-resources)
* [Solidity Lists](https://zenn.dev/nft/scraps/e27d0fb0965b10)
* [A Curated List of Awesome Solidity Resources, Libraries, Tools and more](https://morioh.com/p/3c2a819cd87d)
* [Solidity Cheatsheet](https://topmonks.github.io/solidity_quick_ref/)
* [Cheat sheet and best practices for solidity. Write smart contracts for Ethereum](https://github.com/manojpramesh/solidity-cheatsheet)
* [Solidity Cheat Sheet (DRAFT) by hsoudry](https://cheatography.com/hsoudry/cheat-sheets/solidity/)
* [Solidity Cheat Sheet (2)](https://intellipaat.com/blog/tutorial/blockchain-tutorial/solidity-cheat-sheet/)
* [Fuzzing For Memory Bugs In Solidity](https://ventral.digital/posts/2022/4/28/fuzzing-for-memory-bugs-in-solidity)
* [Solidity Patterns](https://fravoll.github.io/solidity-patterns/)
* [Solidity library for cross chain calls in Forge tests and scripts](https://twitter.com/zachobront/status/1546676202873683968)
* [A web3 educational thread](https://twitter.com/PatrickAlphaC/status/1514257121302429696)
* [All About Solidity — Article Series](https://medium.com/coinmonks/all-about-solidity-article-series-f57be7bf6746)
* [Become a Blockchain Developer](https://cadena.dev/)
* [How to Learn Solidity in 30 Days?](https://medium.com/@choudharyparam99/how-to-learn-solidity-in-30-days-9ac191410d7e)
* [awesome-solidity](https://bkrem.github.io/awesome-solidity/)
* [A list of FREE resources to make Web3 accessible to everyone](https://github.com/FrancescoXX/free-Web3-resources)
* [A curated list of Vyper resources, libraries, tools, and more](https://github.com/stars/pcaversaccio/lists/vyper)
* [Your Roadmap To Becoming A Web 3.0 Developer](https://blog.oliverjumpertz.dev/your-roadmap-to-becoming-a-web-30-developer)
* [Web 3.0: A Developer Roadmap, Guide, and Resources to Get Started](https://blog.idrisolubisi.com/web-3-a-developer-roadmap-and-resources-to-get-started)
* [“Has Anyone Seen Web3?” — The Complete Roadmap and Resources to Become a Web3 Developer](https://betterprogramming.pub/has-anyone-seen-web3-a-complete-roadmap-free-resources-to-become-web3-developer-4e5dc9332c1f)
* [How To Get Into Crypto? 2022 Roadmap For A Web3 Developer](https://medium.com/theweb3stack/how-to-get-into-crypto-a-roadmap-for-a-web3-developer-4a5806f61869)
* [Roadmap to become a web3 developer](https://dev.to/darshancodes/roadmap-to-become-a-web3-developer-412j)
* [My roadmap in web 3](https://dev.to/jesusantguerrero/my-roadmap-in-web-3-1hgo)
* [A collection of useful resources for Developer DAO members](https://github.com/Developer-DAO/resources)
* [A suggested learning path for blockchain development](https://github.com/protofire/blockchain-learning-path)
* [A collection about awesome blockchains - open distributed public databases w/ crypto hashes incl. git](https://github.com/openblockchains/awesome-blockchains)
* [Projects for learning Solidity and Ethereum](https://github.com/antico5/solidity_learning)
* [Awesome Airtable](https://airtable.com/shrkgUGmZoQKML98w/tblx1ZHuo4glJq9Ct?s=09)
* [Intro to Web3 Actions](https://docs.tenderly.co/web3-actions/intro-to-web3-actions)
* [Questbook](https://openquest.xyz/)
* [Devpill.me - A Public Good Blockchain Development Guide](https://github.com/dcbuild3r/blockchain-development-guide)
* [Condensed Guide for Learning Web3 Development in 100 Days](https://tranqui.xyz/posts/100-days-of-code)
* [Dapp University](https://www.dappuniversity.com/)
* [Web3 Code Challenges](https://www.useweb3.xyz/code-challenges)
* [SpeedRunEthereum](https://speedrunethereum.com/)
* [ETH.Build](https://eth.build/)
* [Crash course of 16 high quality resources, tutorials, and videos](https://twitter.com/dabit3/status/1400784178359189506)
* [How to Get Into Crypto and Web3 as a Developer](https://dev.to/dabit3/how-to-get-into-ethereum-crypto-web3-as-a-developer-9l6)
* [Building GraphQL APIs on Ethereum](https://dev.to/edge-and-node/building-graphql-apis-on-ethereum-4poa)
* [The Complete Guide to Full Stack Solana Development with React, Anchor, Rust, and Phantom](https://dev.to/edge-and-node/the-complete-guide-to-full-stack-solana-development-with-react-anchor-rust-and-phantom-3291)
* [How to Build a Full Stack NFT Marketplace - V2](https://dev.to/edge-and-node/building-scalable-full-stack-apps-on-ethereum-with-polygon-2cfb)
* [The Ultimate, Learn Blockchain Development, Solidity, Full-stack Web3, & Smart Contract Course | Javascript (& Typescript) Edition on FreeCodeCamp](https://twitter.com/PatrickAlphaC/status/1529932735665651716)
* [Curated list of resources for the development and applications of blockchain](https://github.com/yjjnls/awesome-blockchain)
* [The contents of this repository will help you launch a career in Blockchain development. How to deploy Smart contracts on Ethereum, build DApps, DeFi, DAO, NFT and Token protocol](https://github.com/frankiefab100/Blockchain-Development-Resources)
* [Ethereum-lists](https://github.com/ethereum-lists)
* [Web3.py](https://web3py.readthedocs.io/en/stable/quickstart.html)
* [Learn Blockchain, Solidity, and Full Stack Web3 Development with Javascript](https://github.com/smartcontractkit/full-blockchain-solidity-course-js)
* [Ultimate roadmap for web3 developers "from zero to master"](https://blog.praneethreddy.me/ultimate-roadmap-for-web3-developers-from-zero-to-master)
* [Must-Reads](https://twitter.com/useWeb3/status/1507005486314364946)
* [Nader’s web3 Resources for Developers](https://naderdabit.notion.site/naderdabit/Nader-s-web3-Resources-for-Developers-a200ed2ef21c4d578dc158df2b882c63)
* [A curated list of resources for blockchain engineers](https://github.com/benstew/blockchain-for-software-engineers)
* [The ultimate Ethereum dev community list](https://www.reddit.com/r/ethdev/comments/9qo59k/the_ultimate_ethereum_dev_community_list/)
* [Here are 5 resources to help you become a (better) web3 dev](https://twitter.com/FusePass/status/1526678668571033602)
* [Going the distance - A blog about blockchains and smart contracts development](https://jeiwan.net/)
* [Devansh's Blog](https://devansh.xyz/)
* [Thirteen incredible GitHub repositories to help you learn everything about blockchain](https://twitter.com/oliverjumpertz/status/1502616933044260867)
* [A basic introduction to web3 and its concepts, using the JavaScript you already know](https://github.com/kay-is/web3-from-zero)
* [Buildspace](https://buildspace.so/)
* [Vyper for Beginners — Toolkit](https://bowtiedisland.com/vyper-for-beginners-toolkit/)
* [A guidebook of links for research topics in the Ethereum R&D Discord](https://github.com/tvanepps/EthereumDiscordGuidebook)
* [Understanding EVM](https://wide-title-ebc.notion.site/Understanding-EVM-87569bd1a4a3458b909c44615fa928e2)
* ["Here is a thread of my 17 favorite videos & guides"](https://twitter.com/dabit3/status/1477463655491031045)
* [The EVM Handbook](https://noxx3xxon.notion.site/noxx3xxon/The-EVM-Handbook-bb38e175cc404111a391907c4975426d)
* [Subgraph Developer Course](https://thegraph.academy/course/subgraph-developer-course/)
* [Ultimate Solidity, Blockchain, and Smart Contract - Beginner to Expert Full Course | Python Edition](https://github.com/smartcontractkit/full-blockchain-solidity-course-py)
* [A curated list of awesome decentralized finance projects](https://github.com/ong/awesome-decentralized-finance)
* [Awesome Ethereum Resource Lists](https://medium.com/quiknode/awesome-ethereum-resource-lists-dd28a9c17fc1)
* [5 Skills A Great Smart Contract Developer Must Master](https://blog.oliverjumpertz.dev/5-skills-a-great-smart-contract-developer-must-master)
* [Solidity Smart Contracts Samples](https://github.com/ajlopez/SoliditySamples)
* [Building full stack apps with Solidity, Ethers.js, Hardhat, and The Graph](https://github.com/dabit3/full-stack-ethereum)
* [Best resources for Solidity gas optimizations ⛽](https://github.com/iskdrews/awesome-solidity-gas-optimization)
* ["Huff, the most gas-optimized smart contract language to ever touch the EVM"](https://twitter.com/huff_language/status/1552368251186716673?t=2B_tyAH-FNxGnmGfdvsOaw&s=19)
* [Solidity gas optimizations and tricks](https://gist.github.com/grGred/9bab8b9bad0cd42fc23d4e31e7347144)
* [Reversing and debugging EVM Smart contracts: Deployment of a smart contract](https://medium.com/@TrustChain/reversing-and-debugging-evm-smart-contracts-part-2-e6106b9983a)
* [Inking a Smart Contract](https://cryptocoven.mirror.xyz/A622VSRm8-9oLzc8l3oFGmfnFUZQmDQ3Wx3ObhSlhsc)
* [A collection of EVM puzzles](https://github.com/fvictorio/evm-puzzles)
* [10 More EVM Puzzles](https://github.com/daltyboy11/more-evm-puzzles)
* [List of awesome Smart-contract-examples github repositories, issues and users](https://githublab.com/repositories?q=smart-contract-examples)
* [How to Read Smart Contracts](https://medium.com/coinmonks/how-to-read-smart-contracts-816d0da2b146)
* [A Survey of Tools for Analyzing Ethereum Smart Contracts](https://publik.tuwien.ac.at/files/publik_278277.pdf)
* [SmartBugs: A Framework to Analyze Solidity Smart Contracts](https://arxiv.org/pdf/2007.04771.pdf)
* [A compilation of smart contracts I find cool/fun/interesting](https://github.com/fiveoutofnine/cool-contracts/)
* [Curated collection of blockchain & cryptocurrency resources](https://github.com/coinpride/CryptoList)
* [Curated list of Ethereum infographics - L1, L2, Oracles, DeFi](https://github.com/dgeorgiev06/awesome-ethereum-diagrams)
* [How To Build Developer Relationship in Web3](https://mirror.xyz/blockbb.eth/_5fPGZgQ4luUDER5dtXCYJTJlqiFj9AeYN1g3aot1Jk)
* [Solana Ultimate Tools Pack for Developers & DeGens](https://officercia.mirror.xyz/XLEds6Py1Xu41WWhqv-LJ2UtH4UKl9cZTnoVx8CvDXQ)
* [A list of ideas for cool stuff to build](https://github.com/0xngmi/ideas)
* [A curated list of cryptography resources and links](https://github.com/sobolevn/awesome-cryptography)
* ["wanna learn smart contract gas optimization? lots of open issues on my repo, will help you learn if you contribute"](https://twitter.com/0xKaden/status/1543749059956969472?t=9TekAmRA7qCPiZ5FNH-PYQ&s=19)
* [EVM nodes: A dive into the full vs. archive mode](https://chainstack.com/evm-nodes-a-dive-into-the-full-vs-archive-mode/)
* [Getting Started w/ Solana](https://twitter.com/therealchaseeb/status/1525340115286953987)
* [Building a Web3 Authentication Flow](https://nader.mirror.xyz/i6ry1Mxez53z91ef375sMe2rO1NvK2ipACyzKA4SR9g)
* [Building with Arweave](https://edgeandnode.com/blog/developers-guide-to-arweave/)
* [Defining the web3 stack](https://edgeandnode.com/blog/defining-the-web3-stack/)
* ["So you want to be a blockchain developer?"](https://tr3y.io/articles/crypto/how2bloccchain.html)
* [Thirteen Incredible GitHub Repositories To Leverage Your Blockchain Learning](https://dev.to/oliverjumpertz/thirteen-incredible-github-repositories-to-leverage-your-blockchain-learning-113p)
* [How I became a Web3 dev in just 7 days and got my first 8000$ Web3 contract](https://blog.cryptostars.is/how-i-became-a-web3-dev-in-just-7-days-and-got-my-first-8000-web3-contract-8f554bcb5352)
* [How to become a blockchain developer](https://medium.com/coinmonks/how-to-become-a-blockchain-developer-7784cb8d357d)
* [Web3 Tutorial: Build an NFT marketplace DApp like OpenSea](https://dev.to/yakult/tutorial-build-a-nft-marketplace-dapp-like-opensea-3ng9)
* [EVM's best explanations, guides, and implementations](https://twitter.com/0xSubway/status/1496507944803848194)
* [Ethereum EVM illustrated](https://takenobu-hs.github.io/downloads/ethereum_evm_illustrated.pdf)
* [Oracle Networks: A Deep Dive Into Data Bridging Solutions](https://research.thetie.io/blockchain-oracle-comparison/)
* [A book about Ethereum](https://github.com/smartcontracts/eth2-book)
* [An Effective Way To Build Your Own Oracle With Solidity](https://noahliechti.hashnode.dev/an-effective-way-to-build-your-own-oracle-with-solidity)
* [Tenderly App — a Swiss Pocketknife for the Web3 developer](https://officercia.medium.com/tenderly-app-a-swiss-pocketknife-for-the-web3-developer-89bb904bee46)
* [A complete course for learning Bitcoin programming and usage from the command](https://github.com/BlockchainCommons/Learning-Bitcoin-from-the-Command-Line)
* [Understand EVM bytecode](https://blog.trustlook.com/understand-evm-bytecode-part-1/)
* [Awesome list of all things oracle manipulation. Creating to help spread a better understanding of oracles and oracle manipulation](https://github.com/0xcacti/awesome-oracle-manipulation)
* [Run your own local Front-End from zero to hero](https://fishy-mailman-e0e.notion.site/Run-your-own-local-Front-End-from-zero-to-hero-b2cdb30a6e0046f0b28351fc431f03e0)
* ["I'm sharing everything I'm learning to become a Blockchain Engineer"](https://github.com/spo0ds/Journey-to-become-a-Blockchain-Engineer)
* [This is the code for "Learn Blockchain in 2 Months" by Siraj Raval on Youtube](https://github.com/llSourcell/Learn_Blockchain_in_2_months)
* [Gas Numbers Every Solidity Dev Should Know](https://macro.cx/gas-nums)
* [VyperExamples](https://www.vyperexamples.com/)
* ["If your in Crypto and you want to start coding (or already have), here are 6 great resources for you"](https://twitter.com/sabocrypto/status/1562537248729419778?s=28&t=CNDvxENlEb5Qupm16LjXKg)
* [Learning a new language? Write a cheat sheet. And an article](https://medium.com/topmonks/learning-a-new-language-write-a-cheat-sheet-and-an-article-1532a9ad072f)

## Security

*Tools & Websites*

* [Breadcrumbs - Investigation Tool](https://www.breadcrumbs.app/)
* [dangerzone.rocks](https://dangerzone.rocks/)
* [RugScreen](https://rugscreen.com/)
* [Ultimate DeFi & Blockchain Research Base](https://github.com/OffcierCia/ultimate-defi-research-base)
* [RugCheck](https://poocoin.app/rugcheck)
* [Wallet Validator](https://www.walletvalidator.com/usdt-trc20-wallet-validator/)
* [Honeypot Token Checker](https://rugdoc.io/honeypot/)
* [Blockchair](https://blockchair.com/)
* [ETHDecoder](https://ethtx.info/)
* [Another Wallet Validator](https://www.npmjs.com/package/wallet-validator)
* [Blockchain Explorer](https://tokenview.com/)
* [BlockCypher](https://live.blockcypher.com/)
* [HAL.xyz](https://app.hal.xyz/)
* [GraphSense](https://graphsense.info/)
* [Crystal Explorer](https://explorer.crystalblockchain.com/)
* [Wallet Explorer](https://www.walletexplorer.com/)
* [Bitcoin Abuse](https://www.bitcoinabuse.com/)
* [BitcoinWhosWho](https://www.bitcoinwhoswho.com/)
* [Check Bitcoin Address](https://checkbitcoinaddress.com/)
* [Scam-Alert](https://scam-alert.io/)
* [Cryptscam](https://cryptscam.com/en)
* [BitRankVerified](https://bitrankverified.com/)
* [Cryptocurrency Alerting](https://cryptocurrencyalerting.com/wallet-watch.html)
* [Crypto Transaction Alert](https://www.cryptotxalert.com/)
* [Know Your Coin Privacy](https://kycp.org/#/)
* [Blockstream](https://blockstream.info/)
* [OXT](https://oxt.me/)
* [badkeysinfo](https://badkeys.info/)
* [Playxo](https://playxo.com/)
* [Keys lol](https://keys.lol/)
* [heyanon!](https://www.heyanon.xyz/)
* [Web3 Security](https://www.w3bs3c.com/)
* [GetBlock](https://getblock.net/en)
* [Sweeposaurus](https://sweeposaurus.com/)
* [Impersonator](https://www.impersonator.xyz/)
* [MistTrack](https://misttrack.io/)
* [CryptoScamDB](https://cryptoscamdb.org/)
* [AML Bot](https://amlbot.com/)
* [Air-Gap Coomputer](https://airgapcomputer.com/)
* [BSCheck](https://www.bscheck.eu/)
* [learn me a bitcoin](https://learnmeabitcoin.com/tools/path/)
* [Blockchain Explorers](https://www.blocksherlock.com/home/blockchain-explorers)
* [TxStreet](https://txstreet.com/v/eth)
* [Blockscout](https://docs.blockscout.com/)
* [AlphaWallet](https://alphawallet.com/)
* [Electrum](https://electrum.org/#home)
* [Sparrow Bitcoin Wallet](https://sparrowwallet.com/)
* [Ethernal](https://tryethernal.com/)
* [Wallet Scrutiny](https://walletscrutiny.com/)
* [Sarcophagus](https://sarcophagus.io/)
* [SafeHaven](https://safehaven.io/)
* [VeraCrypt](https://www.veracrypt.fr/en/Home.html)
* [The Ethernaut](https://ethernaut.openzeppelin.com/)
* [Frame](https://frame.sh/)
* [Review of Tools for Analyzing Security Vulnerabilities in Ethereum based Smart Contracts](https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3769774)
* [A Docker container preconfigured with all of the Trail of Bits Ethereum security tools](https://github.com/trailofbits/eth-security-toolbox)
* [AirGap](https://airgap.it/)
* [Blockchain Transactions Investigation Tool](https://github.com/s0md3v/Orbit)
* [An open source Bitcoin wallet password and seed recovery tool designed for the case where you already know most of your password/seed, but need assistance in trying different possible combinations](https://github.com/gurnec/btcrecover)
* [Blockchain 3D Explorer](https://blockchain3d.info/)
* [TX Analysis tools](https://graph.org/TX-Analysis-tools-04-19)
* [Top 20 blockchain analysis and crypto investigation tools that you can trust](https://cryptosorted.info/blockchain-analysis-and-crypto-investigation-tools/)
* [A Short List of the Rug Checker Tools](https://graph.org/A-Short-List-of-the-Rug-Checker-Tools-04-09)
* [BitcoinAIS](https://bitcoinais.com/)
* [Wallet Rating & Analysis](https://vivigle.com/)
* [Bad Bitcoin](https://badbitcoin.org/)
* [Bitcoin (BTC) OSINT investigations tools](https://medium.com/@ibederov_en/bitcoin-btc-osint-investigations-tools-df0336ca2fc0)
* [Ethereum (ETH) OSINT investigations tools](https://medium.com/@ibederov_en/ethereum-eth-osint-investigations-tools-7d1ec5deab1e)
* [Rapid Smart Contract Crawler](https://github.com/OpenZeppelin)
* [OpenZeppelin](https://docs.google.com/spreadsheets/d/13f7RYobHL5PFVKVtOJw_QugpXyJqkVpjhxRNg6XGt0k/edit#gid=1141583017)
* [A guide to available tools and projects for analyzing and managing risk within DeFi](https://github.com/defi-defense-dao/defi-risk-tools-list#developer-tools)

*Learn & Read*

* [CIA Officer (start.me)](https://start.me/p/QRg5ad/officercia)
* [Cryptocurrency OSINT](https://start.me/p/ek4rxK/cryptocurrency-osint)
* [Crypto-OpSec-SelfGuard-RoadMap](https://github.com/OffcierCia/Crypto-OpSec-SelfGuard-RoadMap)
* [Ethereum Research](https://ethresear.ch/)
* [Ethereum Magicians forum](https://ethereum-magicians.org/)
* [HackerNoon](https://hackernoon.com/)
* [Multisig Best Practices](https://safehodl.github.io/multisig/)
* [How to Securely Manage Company Crypto Funds with Gnosis Safe Multisig](https://blog.gnosis.pm/how-to-securely-manage-company-crypto-funds-with-gnosis-safe-multisig-8b3f67485985)
* [Backdooring Gnosis Safe Multisig wallets](https://blog.openzeppelin.com/backdooring-gnosis-safe-multisig-wallets/)
* [Build a treasury wallet with multisignature Gnosis Safe](https://blog.logrocket.com/build-treasury-wallet-multisignature-gnosis-safe/)
* [Multisignature Wallets Can Keep Your Coins Safer (If You Use Them Right)](https://www.coindesk.com/tech/2020/11/10/multisignature-wallets-can-keep-your-coins-safer-if-you-use-them-right/)
* [A curated list of blockchain security Capture the Flag (CTF) competitions](https://github.com/blockthreat/blocksec-ctfs)
* [Capture the Ether](https://capturetheether.com/)
* [A Survey on Metaverse: Fundamentals, Security,and Privacy](https://arxiv.org/pdf/2203.02662.pdf)
* [Trail of Bits Thread](https://twitter.com/trailofbits/status/1539171350027423744)
* [How To Use Linux LUKS Full Disk Encryption For Internal / External / Boot Drives](https://invidious.sethforprivacy.com/watch?v=5rlZtasM-Pk)
* [Crypto Opsec: Browser (in)security to security](https://thecryptointern.substack.com/p/crypto-opsec-browser-insecurity-to?r=4ud6z&s=w&utm_campaign=post&utm_medium=web)
* [Awesome Solana Security resources](https://twitter.com/0xsanny/status/1508868586890223626)
* [A Guide to NFT Platform Security](https://immutablex.medium.com/a-guide-to-nft-platform-security-30d7129cedd3)
* [Damn Vulnerable DeFi](https://www.damnvulnerabledefi.xyz/)
* [DeFi Security: Best Practices + Security Q&A](https://defieducation.substack.com/p/defi-security-best-practices-security?s=r)
* [ETHSecurity Recap](https://telegra.ph/ETHSecurityRecap-Aug-17th-08-17)
* [Blockchain Security](https://github.com/bunturx/Awesome-Blockchain-Security)
* [A collection of resources to study Solana smart contract security, auditing, and exploits](https://github.com/0xsanny/solsec)
* [Criteria for evaluating Bitcoin wallets' privacy properties](https://github.com/OpenBitcoinPrivacyProject/wallet-ratings)
* [Blockchain security guide](https://wufflz.notion.site/Blockchain-security-guide-b26aec3d920e414d8a354618d3e36eb4)
* [Crypto wallets security as seen by security engineers](https://www.cossacklabs.com/blog/crypto-wallets-security/)
* [Here are 9 attack patterns in DeFi that everyone should know](https://twitter.com/puntium/status/1522373195742932992)
* [EthClipper: A Clipboard Meddling Attack on Hardware Wallets with Address Verification Evasion](https://arxiv.org/pdf/2108.14004.pdf)
* [On Operational Security](https://0xrusowsky.substack.com/p/on-operational-security?r=rx2fd&s=w&utm_campaign=post&utm_medium=web)
* [Avoiding Rug Pulls at Web3, Part 1: Tech](https://medium.com/@marcoworms/avoiding-rug-pulls-at-web3-part-1-tech-479c3f10bcb0)
* [Avoiding Rug Pulls at Web3, Part 2: Social Engineering](https://medium.com/@marcoworms/avoiding-rug-pulls-at-web3-part-2-social-engineering-6c3078cbc8f9)
* [Simplified Roadmap for Blockchain Security](https://devansh.xyz/blockchain-security/2021/09/17/genesis-0x01.html)
* [On Privacy Thread](https://twitter.com/0xfoobar/status/1502083084052836354)
* [Master Thread on Crypto/Web3 Security](https://twitter.com/thisiswenzel/status/1470419212040478720)
* [Damn Vulnerable DeFi - Foundry Version](https://github.com/nicolasgarcia214/damn-vulnerable-defi-foundry)
* [Smart Contract Security Verification Standard](https://github.com/securing/SCSVS)
* [A survey of attacks on Ethereum smart contracts](https://eprint.iacr.org/2016/1007.pdf)
* [SMART CONTRACT SECURITY CHECKLIST](https://ethereum.org/en/developers/tutorials/secure-development-workflow/)
* [Ethereum-Smart-Contracts-Security-CheckList](https://github.com/knownsec/Ethereum-Smart-Contracts-Security-CheckList/blob/master/Ethereum%20Smart%20Contract%20Audit%20CheckList.pdf)
* [A curated list of awesome Ethereum security references](https://github.com/crytic/awesome-ethereum-security)
* [Smart Contract Vulnerabilities (SCV) List](https://github.com/sirhashalot/SCV-List)
* [To learn common smart contract vulnerabilities using Foundry!](https://github.com/SunWeb3Sec/DeFiVulnLabs)
* [Smart Contract: Attacks and Protections](https://www.researchgate.net/publication/338926064_Smart_Contract_Attacks_and_Protections)
* [Sherlock x Secureum CTF](https://github.com/sherlock-protocol/sherlock-ctf-0x0)
* [NFT Security Collection](https://graph.org/NFT-security-01-28)
* [ETHSec Tools](https://graph.org/ETHSec-Tools-02-13)
* [Data: All known smart contract attacks and vulnerabilities](https://graph.org/Data-02-14)
* [Research Summary: Blockchain is Watching You: Profiling and Deanonymizing Ethereum Users](https://www.smartcontractresearch.org/t/research-summary-blockchain-is-watching-you-profiling-and-deanonymizing-ethereum-users/564)
* [Embedded Blockchains: A Synthesis of Blockchains, Spread Spectrum Watermarking, Perceptual Hashing & Digital Signatures](https://cs.paperswithcode.com/paper/embedded-blockchains-a-synthesis-of)
* [Analyze and reproduce attack events or vulnerabilities in the blockchain world](https://github.com/Rivaill/CryptoVulhub)
* [Crypto legal risk checklist](https://docs.google.com/document/d/1GRNrmyuX1Wrs5dOpCeWhz6DdQteouAEMPzRqMFjbjYo/edit?mode=html)
* [A Collaborative DDoS Mitigation Solution Based on Ethereum Smart Contract and RNN-LSTM](https://ieeexplore.ieee.org/document/8892947)
* [Follow this quality checklist before an audit](https://blog.openzeppelin.com/follow-this-quality-checklist-before-an-audit-8cc6a0e44845/)
* [Ethereum smart contract security checklist](https://ethereum.stackexchange.com/questions/8551/ethereum-smart-contract-security-checklist/8593#8593)
* [Opinionated security and code quality standard for Solidity smart contracts](https://github.com/transmissions11/solcurity)
* [A Solidity smart contract auditing checklist](https://github.com/cryptofinlabs/audit-checklist)
* [Smart Contract Security Verification Standard](https://securing.github.io/SCSVS/)
* [What is a security audit, when you should get one, and how to prepare](https://our.status.im/what-is-a-security-audit-when-you-should-get-one-and-how-to-prepare/)
* [Simple Security Toolkit](https://github.com/nascentxyz/simple-security-toolkit#readme)
* [How To Read A Smart Contract Audit Report](https://bowtiedisland.com/how-to-read-a-smart-contract-audit-report/)
* [List of discord communities you must join if learning block sec](https://twitter.com/arunim_shukla/status/1531893490673922053?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1531893490673922053%7Ctwgr%5E%7Ctwcon%5Es1_&ref_url=https%3A%2F%2Ftelegra.ph%2Fembed%2Ftwitter%3Furl%3Dhttps3A2F2Ftwitter.com2Farunim_shukla2Fstatus2F15318934906739220533Fs3D2026t3DLAdrCEAJDXf8--S-bTN3Bg)
* [Per Aspera ad Astra: How to become a smart contract auditor | Notes](https://graph.org/Pel-Ada-Del-Astra-Smart-Contract-Auditor-Pathway-05-07)
* [ETHSec Tools](https://telegra.ph/ETHSec-Tools-02-13)
* [Security Innovation Blockchain CTF](https://blockchain-ctf.securityinnovation.com/#/)
* [Common Vulnerabilities in Smart contracts](https://www.xmind.net/m/2zbPP7/)
* [How to not suck at an audit](https://docs.google.com/presentation/d/1McKvyOPh7Q_alXeT1Y29yGtulKJtdFgQZXqLpsbS6Ow/edit#slide=id.gae3c258275_0_238)
* [Auditor List](https://www.defisafety.com/auditors)
* [Introduction to smart contract security and hacking in Ethereum](https://www.notonlyowner.com/learn/intro-security-hacking-smart-contracts-ethereum)
* [Smart Contract Security Publications](https://www.researchgate.net/search/publication?q=smart+contract+security)
* [If you have non-trivial amounts of money in crypto, no excuse for not having a hardware wallet](https://twitter.com/_anishagnihotri/status/1454090701227143176?t=A0gRYRyHX9lzUYrfaW9eNQ&s=19)
* [OpSec guide](https://twitter.com/jurad0x/status/1454120956516093956?t=pyRWfKZYgOqKmIKorycMuQ&s=19)
* [Learning Best Practices from Web Applications to Avoid Similar Security Vulnerabilities in Decentralized Applications](https://www.theseus.fi/bitstream/handle/10024/170724/Aboualy_Mahmoud_bachelor_thesis.pdf)
* [Top 10 DeFi Security Best Practices](https://blog.chain.link/defi-security-best-practices/)
* [A collection of practical security-focused guides and checklists for smart contract development](https://github.com/nascentxyz/simple-security-toolkit)
* [AuditorsRoadmap](https://github.com/razzorsec/AuditorsRoadmap)
* [A systematic literature review of blockchain cyber security](https://www.sciencedirect.com/science/article/pii/S2352864818301536?via%3Dihub)
* [Research Summary: A Systematic Literature Review of Blockchain Cyber Security](https://www.smartcontractresearch.org/t/research-summary-a-systematic-literature-review-of-blockchain-cyber-security/1299)
* [Re-entrancy attack patterns from our paper "Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks"](https://github.com/uni-due-syssec/eth-reentrancy-attack-patterns)
* [The purpose of this repo is to list all the related Research Papers focused on Smart-contracts security topics. As well as listing all the encountered smart-contracts defects with a summary description](https://github.com/iskdrews/awesome-solidity-security)
* [SMART CONTRACTS: VULNERABILITIES AND REAL ATTACKS](https://www.researchgate.net/publication/353794368_SMART_CONTRACTS_VULNERABILITIES_AND_REAL_ATTACKS)
* [Solidity Security: Comprehensive list of known attack vectors and common anti-patterns](https://blog.sigmaprime.io/solidity-security.html)
* [Materials related to security: docs, checklists, processes, etc](https://github.com/OriginProtocol/security)
* [Blockchain and Smart Contract Security](https://www.sans.org/cyber-security-courses/blockchain-smart-contract-security/)
* [Smart Contract Security Guidelines #3: The Dangers of Price Oracles](https://blog.openzeppelin.com/secure-smart-contract-guidelines-the-dangers-of-price-oracles/)
* [Smart Contract Security for Pentesters](https://iosiro.com/blog/smart-contract-security-pentesters)
* [What’s in Your Wallet? Privacy and Security Issues in Web 3.0](https://arxiv.org/pdf/2109.06836.pdf)
* [EEA EthTrust Security Levels Specification v1](https://entethalliance.org/specs/ethtrust-sl/v1/)
* [Comprehensive list of known attack vectors and common anti-patterns](https://github.com/sigp/solidity-security-blog)
* [Key principles of storing cryptocurrency securely](https://officercia.mirror.xyz/GtKNkmRDR_hhCqrnSENjqfPDHHb0W1M2SVeXDp4swCQ)
* [How I investigate cypto hacks and secuity incidents, and describe methodolgy bu CIA Officer](https://twitter.com/officer_cia/status/1493395239905734667)
* [CIA Officer Thread](https://twitter.com/officer_cia/status/1483138021885108225?s=20&t=uP991LAU_SKSy1G24utwNg)
* [Preventing transaction reordering manipulations in DeFi](https://twitter.com/officer_cia/status/1507747202050916357)
* [A Blockchain-Based Architecture for Collaborative DDoS Mitigation with Smart Contracts](https://link.springer.com/chapter/10.1007/978-3-319-60774-0_2)
* [A globally-accessible knowledge base of adversary tactics and techniques based on real-world observations on decentralized finance](https://github.com/manifoldfinance/defi-threat)
* [The role of Blockchain in DDoS attacks mitigation: techniques, open challenges and future directions](https://arxiv.org/pdf/2202.03617.pdf)
* [Ethereum Smart Contract Security Best Practices](https://consensys.github.io/smart-contract-best-practices/)
* [All known smart contract-side and user-side attacks and vulnerabilities in Web3.0, DeFi, NFT and Metaverse + Bonus](https://graph.org/All-known-smart-contract-side-and-user-side-attacks-and-vulnerabilities-in-Web30--DeFi-03-31)
* [With Rektosaurus you can inspect websites that display NFTs for user-side attacks including script injection](https://twitter.com/officer_cia/status/1514340146027540484)
* [Ultimate crypto scoring & tracking pack](https://telegra.ph/Ultimate-crypto-scoring--tracking-pack-03-19)
* [Getting started with Monero + Bonus](https://telegra.ph/Getting-started-with-Monero--Bonus-04-19)
* [CIA Officer Thread](https://twitter.com/officer_cia/status/1516581048792289280)
* [One More](https://twitter.com/officer_cia/status/1518419172132376581)
* [Practical Deanonymization Attack in Ethereum Based on P2P Network Analysis](https://ipfs.io/ipfs/QmZQLWi7V6XTsNnAZe6AHTvpaPiQnmH5r8brqkteMdVt8i)
* [Do you want to become an on-chain detective?](https://twitter.com/thedefiac/status/1512983745988419588)
* [Cryptocurrency Investigations 101](https://ipfs.io/ipfs/QmfQmR1zdpNP5TjRPWRyAQptZDQE6jerwJpLpUx6AbnDRH)
* [Cross-chain bridge attacks: A-Z](https://telegra.ph/Cross-chain-bridge-attacks-A-Z-05-07)
* [Cryptocurrencies and money laundering investigations](https://baselgovernance.org/publications/quick-guide-1-cryptocurrencies-and-money-laundering-investigations)
* [Not an APT Average: Grand Theft Bitcoin](https://officercia.mirror.xyz/ewfV9-LBnKmgDeTap3FXZ--PNeDzabhQ_5kh1pkKD2A)
* [How to advertise Crypto where it is prohibited](https://graph.org/How-to-advertise-Crypto-where-it-is-prohibited-03-19)
* [2 Violent attack vectors in Crypto: a detailed review](https://officercia.mirror.xyz/rt5W3_6PhnXZ8VjYRcRJrhBCI6-x0EJ7CqPi6CLU6Pk)
* [Known Physical Bitcoin Attacks](https://github.com/jlopp/physical-bitcoin-attacks/blob/master/README.md)
* [Another Thread](https://nitter.net/officer_cia/status/1521903857479081987)
* [A mega-thread about smart contract-side and user-side attacks in Dapp, Web3, Blockchain, DeFi, NFT and Metaverse](https://twitter.com/officer_cia/status/1518899968584597507)
* [Flash Crash for Cash: Cyber Threats in Decentralized Finance](https://arxiv.org/pdf/2106.10740.pdf)
* [From Zapper Post-Mortem to using Front-run in project defense. Theory post](https://www.smartcontractresearch.org/t/from-zapper-post-mortem-to-using-front-run-in-project-defense-theory-post/545)
* [Per Aspera ad Astra: How to become a smart contract auditor & bugbounty-hunter](https://officercia.mirror.xyz/FvMKbibx7gDlufgZSkmYn77CI8HPBsVCeqUKmpXHr0k)
* [How I investigate crypto hacks and security incidents: A-Z](https://officercia.mirror.xyz/BFzv17UwH6QG4q711NAljtSiP8eKR17daLjTdmAgbHw)
* [OpSec in Crypto: Thoughts](https://officercia.mirror.xyz/VCUaozkvMw1CSaNm3VnafrDLX4dwEjDIQo6qSOIbO8o)
* [This thread will show you how you can catch web3 hackers/scammers using OSINT techniques](https://twitter.com/countze0/status/1541805338625818624)
* [Blockchain Scaling Researches](https://telegra.ph/Blockchain-Scaling-Researches-03-13)
* [How to track influencer wallet addresses - NO python, NO API calls, NO coding needed. Only prerequisite is excel](https://twitter.com/StrategicHash/status/1514688087737368576)
* [Blockchain Development and Security](https://github.com/bt3gl-labs/Blockchain-Hacking-Toolkit)
* [Here’s how to become an Etherscan pro](https://covduk.medium.com/heres-how-to-become-an-etherscan-pro-2e2bda6de2dd)
* [AMLBot: determine the purity of cryptoassets and the origin of coins](https://medium.com/@mrdog/amlbot-determine-the-purity-of-cryptoassets-and-the-origin-of-coins-fca22fb99d02)
* [Interesting Article](https://www.phishfort.com/blog/web3-phishing-has-finally-arrived)
* [This paper makes the first exhaustive attempt to identify and define the properties of all physical and digital forms of money](https://twitter.com/officer_cia/status/1490874523733876736)
* [Blockchain educational resources curated by the OpenZeppelin team](https://github.com/OpenZeppelin/awesome-openzeppelin)
* [Decentralize It! Tor link](https://graph.org/Decentralize-It-Tor-link-04-09)
* [A list of several bots](https://t.me/officer_cia/34)
* [Thread about OPSEC in crypto](https://twitter.com/WazzCrypto/status/1511447427751952385)
* [Irrefutable cases of civilian use of OSINT](https://twitter.com/officer_cia/status/1515082467652349952)
* [How crypto gets stolen](https://graph.org/How-crypto-gets-stolen-06-21)
* [How To Investigate Cryptocurrency Crimes Using Blockchain Explorers & OSINT Tool](https://www.1337pwn.com/how-to-investigate-cryptocurrency-crimes-using-blockchain-explorers-and-osint-tools/)
* [Hack Solidity: Reentrancy Attack](https://hackernoon.com/hack-solidity-reentrancy-attack)
* [New doxxing method discovered!](https://telegra.ph/New-doxxing-method-discovered-07-18)
* [Scavenging: Don’t be too kind](https://officercia.mirror.xyz/bO8lYsvxvbdAQI9ArmMDno0rTW8-pE1Fe91NAUuBiVM)
* [MetaMask Clickjacking Vulnerability Analysis](https://slowmist.medium.com/metamask-clickjacking-vulnerability-analysis-f3e7c22ff4d9)
* [What To Know About Cryptocurrency and Scams](https://consumer.ftc.gov/articles/what-know-about-cryptocurrency-and-scams)
* [Critical privacy vulnerability — getting exposed by MetaMask](https://medium.com/@alxlpsc/critical-privacy-vulnerability-getting-exposed-by-metamask-693c63c2ce94)
* [Cryptocurrency isn’t private—but with know-how, it could be](https://www.technologyreview.com/2021/10/28/1027250/cryptocurrency-isnt-private-but-with-know-how-it-could-be/)
* [Phantom Functions and the Billion-Dollar No-op](https://media.dedaub.com/phantom-functions-and-the-billion-dollar-no-op-c56f062ae49f)
* [Crypto WiFi Hack – How it Works](https://www.ledger.com/academy/security/hack-wifi)
* [Frontrunning](https://consensys.github.io/smart-contract-best-practices/attacks/frontrunning/)
* [Exploring Commit-Reveal Schemes on Ethereum](https://medium.com/swlh/exploring-commit-reveal-schemes-on-ethereum-c4ff5a777db8)
* [MacOS + IOS + Crypto + Security = ? | Top 10 security tips for Apple Device users by Officer_CIA](https://telegra.ph/MacOS--IOS--Crypto--Security----Top-10-security-tips-for-Apple-Device-users-by-Officer-CIA-07-25)
* [Officer_CIA: Retrospective](https://officercia.medium.com/officer-cia-retrospective-3aa4af305e57)
* [How to win the war, trick the KGB and protect your crypto-assets from theft by Steganography](https://officercia.mirror.xyz/8ecJG-s_5E6J1t-h8gUNGqV3hbX8If-E5NnrFrOJHUA)
* [How to Steal $100M from Flawless Smart Contracts](https://pwning.mirror.xyz/okyEG4lahAuR81IMabYL5aUdvAsZ8cRCbYBXh8RHFuE)
* [A Collection of Risks and Vulnerabilities in ERC20 Token Contracts](https://github.com/sec-bit/awesome-buggy-erc20-tokens/blob/master/ERC20_token_issue_list.md)
* [Cross-Contract Reentrancy Attack](https://inspexco.medium.com/cross-contract-reentrancy-attack-402d27a02a15)
* [How to Make a Flash Loan using Aave](https://www.quicknode.com/guides/defi/how-to-make-a-flash-loan-using-aave)
* [How to make a jump from Web2 hacking to Web3 hacking?](https://twitter.com/adrianhetman/status/1475550508354093072)
* [Arthur Hacked Research](https://graph.org/Arthur-Hacked-Research-03-22)
* [CRYPTOHACK](https://cryptohack.org/courses/)
* [6 Ways a Site Can Attack your MetaMask](https://bloom.co/blog/6-ways-a-site-can-attack-your-metamask)
* [Hacking EthGlobal: Strength in numbers to RCE](https://elyx0.medium.com/hacking-ethglobal-strength-in-numbers-to-rce-3c8760a5700e)
* [Here are 5 security practices you should look for when sizing up a project](https://twitter.com/puntium/status/1513957503553323012)
* [Android-based Cryptocurrency Wallets: Attacks and Countermeasures](https://ieeexplore.ieee.org/document/9284708)
* [Hacking Web3: Introduction and How to Start](https://infosecwriteups.com/hacking-web3-introduction-and-how-to-start-88ae2c51f3ec)
* [How hackers may steal your Ethers and why does eth_sign function matter?](https://officercia.mirror.xyz/M0QAuwwbppAFj2KWZV02DEC8CtrxaX3R47kdpcTspvE)
* [List of Breach Vectors Hackers Exploit to Steal Cryptocurrency](https://cipherblade.com/blog/list-of-breach-vectors-hackers-exploit-to-steal-cryptocurrency/)
* [The Dark Side of DeFi: Cross-Chain Bridge Hacks](https://quantstamp.com/blog/the-dark-side-of-defi-cross-chain-bridge-hacks)
* [A thread on some obscure knowledge, on things you don’t know you don’t know](https://twitter.com/StefanPatatu/status/1522570166890119173)
* [Spoofing, Sweepers, and Clipboard Hacks: How To Stay Safe From Scams](https://consensys.net/blog/metamask/spoofing-sweepers-and-clipboard-hacks-how-to-stay-safe-from-scams/)
* [List of Security Vulnerabilities](https://github.com/runtimeverification/verified-smart-contracts/wiki/List-of-Security-Vulnerabilities)
* [Semgrep rules for smart contracts based on DeFi exploits](https://github.com/Decurity/semgrep-smart-contracts)
* [Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!](https://github.com/sw33tLie/bbscope)
* [Laplace's Demon Speaks: Is there a life in blockchain?](https://officercia.mirror.xyz/OWdu4NkAeygp2dh-AXr82gM_fWD95WuFSP3WzMnpddc)
* [25 OpSec tips](https://twitter.com/officer_cia/status/1518806917677735936)
* [Why OpSec in general and Counter-OSINT in particular are important? Let’s take a look](https://twitter.com/officer_cia/status/1515726710045659146)
* [Learning Blockchain Hacking/Auditing](https://blog.0xrishabh.dev/2022/03/05/Learning-Blockchain-Hacking/)
* [Hacking the Blockchain: Ethereum](https://medium.com/immunefi/hacking-the-blockchain-an-ultimate-guide-4f34b33c6e8b)
* [Someone overheard me! Why it's important to think about all attack vectors, even if they seem unlikely to happen?](https://officercia.mirror.xyz/Gc4msiSq4HkKrrsKcL5tDF613iUtX4vWUAb5DYdDPC0)
* [Private key safety](https://github.com/johguse/profanity/issues/61)
* [Monolithic wallets — The Achilles heel of web3 security](https://medium.com/@gnarvaja/coupled-wallets-the-achilles-heel-of-web3-security-56272bc8d90f)
* [Uncle Maker: (Time)Stamping Out The Competition in Ethereum](https://www.researchgate.net/publication/362482526_Uncle_Maker_TimeStamping_Out_The_Competition_in_Ethereum)
* [Thread by ZachXBT](https://twitter.com/zachxbt/status/1519373126894862337)
* [Investigating transactions in cryptocurrencies](https://arxiv.org/pdf/2203.14684.pdf)
* [7 ways to level up your Bitcoin OpSec](https://blog.keys.casa/7-ways-to-level-up-your-bitcoin-opsec/)
* [Bounty Spreadsheet](https://docs.google.com/spreadsheets/u/0/d/1oF6vA71id2xDp8GTxY7xBMNz67ZpbwVDAzhDeIXtnzo/htmlview#)
* [Ethereum Blacklist](https://www.cryptoblacklist.io/en/ethereum-blacklist/)
* [Ethernal x Tenderly](https://blog.tryethernal.com/ethernal-x-tenderly/)
* [ElectAnon: A Blockchain-Based, Anonymous, Robust and Scalable Ranked-Choice Voting Protocol](https://arxiv.org/pdf/2204.00057.pdf)
* [On-Chain Privacy](https://messari.io/report/on-chain-privacy)
* [30+ NFT-based projects built with NFTPort at HackFS Hackathon](https://www.nftport.xyz/blog/nft-projects-built-with-nftport-at-hackfs-hackathon)
* [Hacker tools for recovering old BTC wallets from old devices](https://graph.org/Hacker-tools-for-recovering-old-BTC-wallets-from-old-devices-05-08)
* [QR Code: An Underestimated Danger](https://officercia.mirror.xyz/aN6giRkUsNd0o0bmjZVeZb2htkO_Ve16gMsARU6RBfM)
* [Deanonymisation of Clients in Bitcoin P2P Network](https://www.cryptolux.org/images/a/a1/Ccsfp614s-biryukovATS.pdf)
* [Evaluating User Privacy in Bitcoin](https://eprint.iacr.org/2012/596.pdf)
* [A fistful of bitcoins: characterizing payments among men with no names](https://www.researchgate.net/publication/262357109_A_fistful_of_bitcoins_characterizing_payments_among_men_with_no_names)
* [Bitcoin Address Clustering Method Based on Multiple Heuristic Conditions](https://www.researchgate.net/publication/351019556_Bitcoin_Address_Clustering_Method_Based_on_Multiple_Heuristic_Conditions)
* [Bitcoin Transaction Graph Analysis](https://www.researchgate.net/publication/271855021_Bitcoin_Transaction_Graph_Analysis)
* [When the cookie meets the blockchain: Privacy risks of web payments via cryptocurrencies](https://arxiv.org/pdf/1708.04748.pdf)
* [Fundamentals of OpSec in Crypto](https://medium.com/the-business-of-crypto/fundamentals-of-opsec-in-crypto-7844ba701b1d)
* [This is how you can protect your cryptocurrencies from hackers](https://www.cnbc.com/2017/11/02/heres-how-to-protect-your-bitcoin-and-ethereum-from-hacking.html)
* [BITCOIN SECURITY & RESOURCES](https://www.lopp.net/bitcoin-information/security.html)
* [5 Tips to Prevent Hackers From Stealing Your Crypto Assets](https://hackernoon.com/5-tips-to-prevent-hackers-from-stealing-your-crypto-assets-e2243zig)
* [Knowing Your Coin Privacy (Using KYCP.org)](https://medium.com/samourai-wallet/knowing-your-coin-privacy-using-kycp-org-7b3b4385d8b)
* [How to Stay Safe on the Internet: A Guide for Crypto Users](https://trustwallet.com/blog/how-to-stay-safe-on-the-internet-crypto-guide)
* [CryptoSec](https://cryptosec.info/checklist/)
* [DeFiSec](https://docs.google.com/spreadsheets/d/1St4BXWpeZdcDaH5Z4nnODrerFAxfdZ4OuHofI-EbKGc/edit#gid=0)
* [DeFiSec 2](https://docs.google.com/spreadsheets/d/e/2PACX-1vR5UnBx4M9sg43fO76eWetena1L-4zo82lqsJuMR3uuZPe7luRnakG8jZPG0YbnSDtUOY5nVgSdwpc1/pubhtml)
* [Bad Actors Abusing ERC20 Approval to Steal Your Tokens!](https://medium.com/mycrypto/bad-actors-abusing-erc20-approval-to-steal-your-tokens-c0407b7f7c7c)
* [What is a logic bomb and how can it be used?](https://twitter.com/officer_cia/status/1403039757265997828)
* [A clipboard meddling attack on hardware wallets with address verification evasion - Good Read!](https://twitter.com/officer_cia/status/1491920415387574275)
* [How Your Metamask Got Hacked (Probably)](https://medium.com/coinmonks/how-your-metamask-got-hacked-probably-795abca4534a)
* ["You've been asking me for a long time and finally I decided to write an ultimative thread on an advanced (and authorial, please note) cryptocurrency storage technology"](https://twitter.com/officer_cia/status/1518419172132376581?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1518419172132376581%7Ctwgr%5E602a1c05eb4e23a46557c52a5c141dcaec2ea51a%7Ctwcon%5Es1_&ref_url=https%3A%2F%2Fofficercia.mirror.xyz%2FGtKNkmRDR_hhCqrnSENjqfPDHHb0W1M2SVeXDp4swCQ)
* [A summary of 100+ CTF blockchain challenges](https://github.com/minaminao/ctf-blockchain)
* [A curated list of awesome resources and projects that concern blockchain interoperability](https://github.com/nomad-xyz/awesome-interop)
* [What to do if you think someone has hacked you? A big thread](https://twitter.com/officer_cia/status/1560348596570144769)
* [DeFi Protocol Risks: The Paradox of DeFi](https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3866699)
* [the cryptopals crypto challenges](https://cryptopals.com/)
* [CIA Officer's very-special compilation of amazing Anonymity, OpSec & Privacy guides!](https://twitter.com/officer_cia/status/1561094689612234752)
* [A thread of interesting Paradigm CTF writeups](https://twitter.com/0xfoobar/status/1561529252029276161)
* [Solutions to paradigm CTF](https://twitter.com/pandadfi/status/1561618580252262400?s=21)
* [Paranoid's library contains implementations of checks for well known weaknesses on cryptographic artifacts](https://github.com/google/paranoid_crypto)
* [An ultimate list of rules any on-chain survivor should follow to stay safe!](https://officercia.mirror.xyz/_nD1Rtxe1PplK-NQzIq9sl-KNtajQG0aKqYsV36RTjA)
* [Public reports of performed audits](https://github.com/pessimistic-io/audits)
* [A Quick Guide to Hack private variables in Solidity](https://medium.com/coinmonks/a-quick-guide-to-hack-private-variables-in-solidity-b45d5acb89c0)
* [Foundry Cheatsheet](https://github.com/dabit3/foundry-cheatsheet)
* [List of resources to learn smart contract hacking](https://github.com/geekshiv/Smart-Contract-Hacking)
* [Secureum Bootcamp](https://hackmd.io/@secureum/bootcamp-epoch0-announcement)
* [The Ultimate Smart Contract Auditing Guide](https://medium.com/coinmonks/the-ultimate-smart-contract-auditing-guide-ddec6e78e7dc)
* [The Best Smart Contract Auditors: Ranked](https://bowtiedisland.com/the-best-smart-contract-auditors-ranked/)
* [REKT Leaderboard](https://rekt.news/leaderboard/)
* [Smart Contract Weakness Classification and Test Cases](https://github.com/SmartContractSecurity/SWC-registry)
* [JiuZhou is a data set of Ethereum bug smart contracts (ICSME 2020)](https://github.com/xf97/JiuZhou)
* [the magic X-ray machine for solidity smart contracts](https://github.com/tintinweb/smart-contract-inspector)
* [A curated list of web3Security materials and resources For Pentesters and Bug Hunters](https://github.com/Anugrahsr/Awesome-web3-Security)
* [A Tool for clone detection and bug detection in smart contracts](https://github.com/beyondacm/SmartEmbed)
* [SmartEmbed: A Tool for Clone and Bug Detection in Smart Contracts through Structural Code Embedding](https://arxiv.org/pdf/1908.08615.pdf)
* [DApp Frontend Security](https://blog.embarklabs.io/news/2020/01/30/dapp-frontend-security/index.html)
* [A checklist detailing DevSecOps practices for EVM-based projects](https://github.com/0xsomnus/Solidity-DevSecOps-Standard)
* [A collection of smart contract attack vectors along with prevention methods](https://github.com/KadenZipfel/smart-contract-attack-vectors)
* [A Survey of Security Vulnerabilities in Ethereum Smart Contracts](https://arxiv.org/pdf/2105.06974.pdf)
* [Smart Contract Weakness Classification and Test Cases](https://swcregistry.io/)
* [Smart Contract Development and Auditor Roadmap](https://twitter.com/cryptoThemeX/status/1541080265543454721?t=CPS6zIi2sb6oWszFxHKyxg&s=19)
* [A guide to smart contract security best practices](https://github.com/ConsenSys/smart-contract-best-practices)
* [How to become a smart contract auditor](https://cmichel.io/how-to-become-a-smart-contract-auditor/)
* [Guidelines and training material to write secure smart contracts](https://github.com/crytic/building-secure-contracts)
* [List of Ethereum Smart Contracts Post-Mortems](https://forum.openzeppelin.com/t/list-of-ethereum-smart-contracts-post-mortems/1191)
* [Interesting Thread](https://twitter.com/storming0x/status/1509769575021178886)
* [Clockwork Finance: Automated Analysis of Economic Security in Smart Contracts](https://eprint.iacr.org/2021/1147.pdf)
* [FASTEN: Fair and Secure Distributed Voting Using Smart Contracts](https://arxiv.org/abs/2102.10594)
* [Distinguishing EOA and Smart Contracts Securely](https://blog.solidityscan.com/distinguishing-eoa-and-smart-contracts-securely-911dc42fdf13)
* [Hacking Cryptocurrency Miners with OSINT Techniques](https://s3yfullah.medium.com/hacking-cryptocurrency-miners-with-osint-techniques-677bbb3e0157)
* [Targeting the Weakest Link: Social Engineering Attacks in Ethereum Smart Contracts](https://arxiv.org/pdf/2105.00132.pdf)
* [The ultimate Ethereum dev community list](https://www.reddit.com/r/ethdev/comments/9qo59k/the_ultimate_ethereum_dev_community_list/)
* [Smart Contract Research Forum](https://www.smartcontractresearch.org/)
* [A place where you can enhance your Security Skills by solving and learning from CTF like challenges. The challenges will be targeted towards Blockchain Security, Smart Contract Exploitation, and Cryptography](https://ciphershastra.com/)
* [Contracts Wizard](https://docs.openzeppelin.com/contracts/4.x/wizard)
* [Introduction to Ethereum Security](https://academy.fuzzinglabs.com/view/courses/introduction-to-ethereum-security)

*Cases*

* [Compound Incident Analysis](https://twitter.com/Mudit__Gupta/status/1443454935639609345)
* [Fei Bonding Curve Bug Post Mortem](https://medium.com/fei-protocol/fei-bonding-curve-bug-post-mortem-98d2c6f271e9)
* [Fei Protocol Flashloan Vulnerability Bugfix Review](https://medium.com/immunefi/fei-protocol-flashloan-vulnerability-postmortem-7c5dc001affb)
* [Nomad Case](https://twitter.com/samczsun/status/1554252024723546112)
* [Slope app](https://twitter.com/0xTre/status/1554916547940196352)
* [Interesting Thread](https://twitter.com/HelpedHope/status/1554812859737165824)
* ["Hackers emptied Ethereum wallets by breaking the basic infrastructure of the internet"](https://www.theverge.com/2018/4/24/17275982/myetherwallet-hack-bgp-dns-hijacking-stolen-ethereum)
* [Hackers blackmail exchange with $5 million of Ethereum fees - report](https://decrypt.co/32145/hackers-blackmail-exchange-with-5-million-of-ethereum-fees-report)
* ["Been reading a ton of DeFi Audits the last couple weeks; there are some report design/structures I'd really like to see more"](https://twitter.com/patrickd_de/status/1481646325082984450?t=WP8IuBHkM8NYpjTRzSxWHA&s=19)
* [Thread on how to learn about how the attack works, how to protect yourself, and some basic malware analysis](https://twitter.com/samczsun/status/1544186151585533952?s=20)
* [This thread will show you how you can catch web3 hackers/scammers using OSINT techniques](https://twitter.com/countze0/status/1541805472738590725)
* [Brief analysis of Zabu Finance being hacked](https://slowmist.medium.com/brief-analysis-of-zabu-finance-being-hacked-44243919ea29)
* [VEE.Finance Attack Analysis](https://veefi.medium.com/vee-finance-attack-analysis-a4839724e085)
* [Interesting Thread](https://twitter.com/storming0x/status/1509769575021178886)
* [Guidelines and training material to write secure smart contracts](https://github.com/crytic/building-secure-contracts)
* [AN UN-SOL-VED MYSTERY](https://rekt.news/unsolved-mystery/)
* [What does an inflationary DeFi protocol do when it runs out of tokens to pay out rewards?](https://twitter.com/0xIvo/status/1554926458937778177)
* [Uniswap bug causes loss of ETH](https://hackmd.io/@0x534154/Hy6_66gT5)
* [deBridgeFinance has been the subject of an attempted cyberattack, apparently by the Lazarus group](https://twitter.com/AlexSmirnov__/status/1555586334378676225)
* [Just came across an evolution of an old YouTube scam that was quite interesting. It's netted the creator over $30,000 in just over 24 hours. A thread on how it works & the new innovations in this particular version of it](https://twitter.com/_apedev/status/1555719446467153921)
* [Took a quick look at the RektHQ leaderboard and made a summary of hacked protocols and their auditors](https://twitter.com/ManoppoMarco/status/1555951122103222272)
* [Today I nearly got caught by a fascinating and devious crypto scam during an OTC transaction. Read on to learn what happened, so you can avoid it happening to you](https://twitter.com/dafacto/status/1555607295979147265)
* [6 Ways a Site Can Attack your MetaMask](https://bloom.co/blog/6-ways-a-site-can-attack-your-metamask/)
* [Hackers and fraudsters used crypto bridge RenBridge to launder $540 million](https://www.theverge.com/2022/8/10/23299841/crypto-bridge-renbridge-used-launder-money-russia-north-korea-ransomware-report)
* [Curve Finance Hack Incident Analysis](https://www.certik.com/resources/blog/49wUGTmcApcgIxkF3PFwbE-curve-finance-hack-incident-analysis)
* [TradFi, Meet DeFi: Breaking Down the Economics of DeFi Hacks](https://blog.zellic.io/2022/08/09/breaking-down-the-economics-of-defi-hacks/)
* [ACALA NETWORK - REKT](https://rekt.news/acala-network-rekt/)
* ["Over the past two weeks, we’ve worked closely with slope_finance, phantom, and solana to investigate the root cause of the drained wallets. Here’s what we found"](https://twitter.com/osec_io/status/1559574494821306369)
* [Web3 Extension Malware](https://twitter.com/wallet_guard/status/1561046182645751810)
* ["Do you know a simple signature in Metamask can drain your wallet?"](https://twitter.com/korpi87/status/1560416631678910464)
* [Ronin Bridge - This thread will illustrate the tracking analysis procedures](https://twitter.com/blitezero/status/1560954269192564737)
* [Hackers steal crypto from Bitcoin ATMs by exploiting zero-day bug](https://www.bleepingcomputer.com/news/security/hackers-steal-crypto-from-bitcoin-atms-by-exploiting-zero-day-bug/)
* [Uniswap V3 — — New Phishing Scam?](https://medium.com/coinmonks/uniswap-v3-new-phishing-scam-97f43f7b423a)
* [Recovering Assets from a Hacked Account with Flashbots](https://medium.com/@kanewallmann_71759/recovering-assets-from-a-hacked-account-with-flashbots-bfe920435fb6)
* [DeFi Attack](https://twitter.com/BlockSecTeam/status/1562286943957708800)
* [DeFi Exploits: Trends, Patterns, and Lessons Learnt](https://tokenterminal.substack.com/p/defi-exploits-trends-patterns-and?sd=pf)
* [Harvest Flashloan Economic Attack Post-Mortem](https://medium.com/harvest-finance/harvest-flashloan-economic-attack-post-mortem-3cf900d65217)
* [Interesting Thread](https://twitter.com/Crema_Finance/status/1543638844410499073)
* [Comprehensive List of DeFi Hacks & Exploits](https://cryptosec.info/defi-hacks/)
* [Audit Database](https://defiyield.app/audit-database/)
* [Smart Contract security audit reports](https://github.com/TechRate/Smart-Contract-Audits)
* [The 2022 Crypto Crime Report](https://go.chainalysis.com/rs/503-FAP-074/images/Crypto-Crime-Report-2022.pdf)

## Nodes and Testnets

*Tools & Resources*

* [Node providers](https://workflowy.com/s/node-providers/Y4H4ysAMGor96e7i)
* [Nodes Guru](https://nodes.guru/)
* [Termius](https://termius.com/)
* [htop.dev](https://htop.dev/)
* [Glances](https://nicolargo.github.io/glances/)
* [FileZilla](https://filezilla-project.org/)
* [Regularly updated list of Bitcoin-friendly VPS, dedicated server, VDS, VPN, and email providers](https://bitcoin-vps.com/)
* [A curated list of awesome Node providers and public PRC endpoints for Ethereum, BSC, Gnosis (xDAI), Fantom, Avalanche, KuCoin, Fuse, Harmony, Tezos, IoTeX, Arbitrum, Optimism and more](https://github.com/arddluma/awesome-list-rpc-nodes-providers)
* [Docker](https://www.docker.com/)
* [Grafana](https://grafana.com/)

Web3-Tech

Web3-Tech 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Web3-Tech

Web3-Tech 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README