PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How to become a web3 bug bounty hunter

hackenproof.com | blog | #bug-bounty | #web3 | #ethereum | #solidity | #smart-contract-audit | #learning-path
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A learning path for aspiring Web3 bug hunters: build coding basics with JavaScript, learn Ethereum and Solidity, then practice on smart contract CTFs and DeFi protocol code.
Published
Collected

Related coverage

tool · hackenproof.com
How to install and use Foundry toolkit for smart contract auditing
A step-by-step guide to Foundry, the Rust-based Ethereum toolkit: install via foundryup, scaffold a project with forge init, then test and deploy a contract on a local anvil node.
blog · hackenproof.com
How to: Smart Contracts Bug Hunting
A beginner's guide to smart contract bug hunting: learn Ethereum and Solidity basics through CryptoZombies and Remix IDE, then study OpenZeppelin contracts with tools like solc and Mythril.
blog · hackenproof.com
How to use Slither for auditing smart contracts
A hands-on guide to Slither, the Python-based Solidity static analysis framework: installing via pip or Docker, pointing it at a contract, project or mainnet address, and reading its findings.
blog · hackenproof.com
How to use MythX for smart contract auditing
A hands-on guide to MythX, an automated EVM smart contract scanner combining static analysis, dynamic analysis and symbolic execution, from CLI setup and API keys to deep-scan reports.
blog · hackenproof.com
Optimizing Gas Usage in Solidity
A guide to gas optimization in Solidity: how gas and opcodes work under the EVM's fee model, and practical techniques for writing contracts that execute more cheaply and resist misuse.
blog · blog.trailofbits.com
State Machine Testing with Echidna
A Trail of Bits engineer adapts Hedgehog-style state machine testing to EVM contracts with Echidna, showing how random call sequences can verify invariants and surface logic bugs in Solidity code.
Back