Quillhash/QuillAudit_Auditor_Roadmap

Stars
472
Rank 93,034 (Top 2 %)
Language
Created about 2 years ago
Updated 11 months ago

Quillhash/QuillAudit_Auditor_Roadmap

Quillhash

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

This repository contains a mindmap and stepwise resource to get started with Smart Contract Auditing. If you find anything missing or want to update existing resources, feel free to create a pull request.

QuillAudit's SmartContract Auditor Roadmap

Pdf Link: QuillAudit_Auditor_Roadmap.pdf

Xmind Link: https://xmind.works/#/share/OjLKsLSh

Here is the best roadmap for you to become a Smart Contract Auditor! If you find anything missing or want to update existing resources, you can create a pull request and contribute to the project.

Steps to Follow:

1. Blockchain & Ethereum Basics:

Blockchain :
- Blockchain Technology Explained
- Blockchain Cryptography
Ethereum:
- Mastering Ethereum
  - Mandatory Chapters 1,4,5,6,7,9,13 & 14
- Ethereum Documentations

2. Solidity Fundamentals:

Solidity Docs
smartcontract.engineer
Cryptozombies
Solidity-by-example
Secureum:
- Secureum Solidity 101
- Secureum Solidity 201
Solidity Gas Optimizations List

3. Testing and Debugging Frameworks

4. Commonly used Libraries and Token Standards:

ERC Token Standards:
- ERC 20
- ERC 721 (NFT)
- ERC 777
- ERC 1155
- ERC 4626
- ERC 2981
OpenZeppelin Helper Library/Contracts.
Upgradable Contracts:

5. Solidity Security Standard & Best Practice:

6. Smart Contract Vulnerabilities:

7. CTF Challenges:

100+ CTF blockchain challenges: https://github.com/minaminao/ctf-blockchain

8. Finance and DeFi:

Finance:
- Khan Academy’s Finance
DeFi (Decentralized Finance)
Well known DeFi Protocols:
- Uniswap
- Compound
- Aave
- Balancer
Common DeFi Attack Vectors:

9. Auditing Tools and Techniques:

Auditing Tools:
- Slither
- Mythril
- Mythx
- Echidna
- Foundry FUZZ
- Manticore
- Surya
VS Code Extensions
Auditing Books and Guides
Complete List of Web3 Security Tools

10. Postmortem & Audit Reports:

Postmortems:
- Immunefi
- QuillAudits
- BlockSec
- SlowMist
- Rekt News
- Neptune Mutual
- PeckShield
- hacxyk
- Coinmonk
- TrailOfBits
- Secureum
- Openzeppelin
- OfferCIA
Audit Report Reading

11. Keep Yourself Updated:

Newsletters: Blockthreat, Hashingbits, Immunefi
Discord Communities: QuillAudits, Immunefi, Secureum, Blockchain Pentesting, OpenSense, Web3SeucurityDAO, DeFiHackLabs
Twitter: Mudit Gupta, Samczun, Certik Alert, PeckShieldAlert, QuillAudits, BlockSec, BeosinAlert, Officer_CIA

12. Miscellaneous Resources:

Credits:

Auditor Mindmap by Razzorsec

Solidity-Attack-Vectors

This Repository contains list of Common Solidity SmartContract Attack Vectors. If you find any attack vectors missing, you can create a pull request and be a contributor of the project.

Web3-Security-Tools

This repository contains a list of the most popular and widely used tools in web3 security. If you find any tools missing, you can create a pull request and be a contribute the project.

QuillAudit_Reports

QuillAudits Smart Contracts, deFi, NFT, tokens,Dao , Dex and DApps Audit Reports

NFT-Attack-Vectors

This Repository contains list of Common NFT Attack Vectors. If you find any attack vectors missing, you can create a pull request and be a contributor of the project.

DeFi-Attack-Vectors

This Repository contains list of Common DeFi threat and Attack Vectors. If you find any attack vectors missing, you can create a pull request and be a contributor of the project.

Zero-Knowledge-Mastery

This repository contains list of resources to aid your journey of mastering Zero Knowledge Proofs. If you find any resource missing, you can create a pull request and be a contributor of the project.

EVM-Mastery

This repository contains list of resources to aid your journey of mastering Ethereum Virtual Machine. If you find any resource missing, you can create a pull request and be a contributor of the project.

Smart-contract-Auditing-Methodology-mindmap

This repository contains a mindmap on smart contract auditing methodology and different steps in how to audit a smart contract.

Smart-Contract-Developer-Roadmap

Here is the best roadmap for you to become a Smart Contract Developer! If you find anything missing or want to update existing resources, you can create a pull request and contribute to the project.

Quill-CTFs

Quill CTF is a game in which you hack Ethereum smart contracts to learn about security. The game is designed to educate players on how to identify and fix security issues in Ethereum smart contracts.

Real-World-Assets

This repository comprises the theoretical and technical aspects of tokenisation of real world assets.

DeFi-anti-hack-checklist

This repo contains anti-hack checklists, which will help projects to build and develop secure DeFi applications. If you find anything missing or want to update existing resources, you can create a pull request and contribute to the project.

upradeableToken

Smart contracts upgrade , delegateProxy

dNFTs

Distributed ownership of NFT assets on EOS

Blockchain-Attack-vectors

This Repository contains list of Common Blockchain threats and Attack Vectors. If you find any attack vectors missing, you call create a pull request and be a contributor of the project.

NFT-anti-hack-checklist

In this repository, we have created a checklist for developers as well as for users to prevent these hacks/scams and stay safe from these hackers/scammers. If you find anything missing or want to update existing resources, you can create a pull request and contribute to the project.

BEP20Token

binance chain BEP-20 token

Proxies-Security

This repository comprises of everything you need to know about Solidity proxies, upgradeable smart contracts and their security.

ConsensysIndiaHack

credit scores on blockchain

Crowdsale_EOS

Basic Crowdsale smart contract in EOS

MetaTransactiosn_UniversalLogins_Proxy

Blockchain better UX , onboarding Registry (Meta transactions , Universal Logins)

hyperledger-composer-supplychain

hyperledger fabric supply chain

Quill.Capital

Security Tokens Issuance Platform

forwards-checks

Forwards Contracts Trading on R3 CORDA

infiniverse-community-audit

A community audit for the Infiniverse EOS smart contracts

EOS-Crowdsale

A decentralized crowdsale smart contract built on EOS.

stellar-hyperledger-telemedicine

electronic health records on blockchain (hyperledger, stellar)

MultiInserter

Script to insert thousands of records in smart contract mapping.

quillTrace

QuillTrace , supply chain smart contracts

eosio-token

Standard EOSIO token contracts with test cases in python created using eos factory