PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Getting started with smart contract in Bug Bounty

yeswehack.com | blog | #bug-bounty | #web3 | #smart-contracts | #security-research | #blockchain | #solidity | #evm
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A guest guide on getting started with smart contract bug bounties: what smart contracts are, why they are high-value targets, Solidity basics, fork testing and a hunting session walkthrough.
Published
Collected

Related coverage

blog · netspi.com
Ethereum Virtual Machine Internals – Part 2
Part two on EVM internals covers persistent contract Storage: how Solidity types map to 32-byte storage slots, SSTORE and SLOAD semantics, and the gas costs that make storage writes expensive.
blog · netspi.com
Ethereum Virtual Machine Internals – Part 1
Part one on EVM internals explains how the Ethereum Virtual Machine executes smart contracts deterministically, covering volatile memory, function selection, and bytecode-level vulnerabilities.
blog · blog.trailofbits.com
State Machine Testing with Echidna
A Trail of Bits engineer adapts Hedgehog-style state machine testing to EVM contracts with Echidna, showing how random call sequences can verify invariants and surface logic bugs in Solidity code.
blog · blog.trailofbits.com
Echidna, a smart fuzzer for Ethereum
Trail of Bits releases Echidna at EthCC, the first fuzzer built for smart contracts, pairing a simple echidna-test runner for Solidity assertions with a library for custom state-machine analyses.
blog · hackenproof.com
Aptos Move Smart Contract Security: How Object Refs Leak and Global Storage Breaks
Unchecked borrow_global_mut, leaked object refs, and Block-STM races break Aptos protocols. See the $25.5M Thala exploit and an Aptos/Supra audit checklist.
blog · hackenproof.com
HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry
HackenProof and Hack The Box turn blockchain security into a gamified CTF track with weekly challenges and a ten-quest series, giving top performers a path into the bug bounty ecosystem.
Back