Introduction to Smart Contract Security and Decentralized Web Applications

Part two on EVM internals covers persistent contract Storage: how Solidity types map to 32-byte storage slots, SSTORE and SLOAD semantics, and the gas costs that make storage writes expensive.

A Trail of Bits engineer walks through OpenZeppelin's Ethernaut CTF on the Ropsten testnet, solving fallback, delegation, and re-entrancy challenges that teach smart contract vulnerability basics.

A short piece outlining three practical ways to make smart contracts more secure, drawing on lessons from a recent vulnerability.

CertiK contrasts FunC and Tolk in code, showing how typed schemas, auto-serialization, and lazy loading shift TON contract security, and lists residual authorization, replay, and accounting risks.

Part one on EVM internals explains how the Ethereum Virtual Machine executes smart contracts deterministically, covering volatile memory, function selection, and bytecode-level vulnerabilities.

A beginner's guide to Solidity by HackenProof guest author Hammad Iftikhar, covering core concepts — data types, functions, modifiers, events and error handling — with security-focused tips.