secureum-mind_map

Central Repository for the Epoch 0 coursework and quizzes. Contains all the content, cross-referenced and linked.

MIT License

Stars
1.8K
View Code on GitHub View on X
Ecosystems: Solidity, Ethereum

All information was original created by 0xRajeev that he has developed from other public sources. This content is for the Secureum Epoch0 Bootcamp for Smart Contract auditing. The plan is to grow this over time. Pull requests accepted.

Information I would like to add (my wish list):

  • Solidity example where applicable
  • Add Forge examples for relevant topics

Please report any errors or rendering issues. Happy to accept PR's that improve upon the content.

The impetus for this project was self-edification as well as providing better accessibility to the content 0xRajeev has produced. Plus, I really wanted to make some cool graphs and play with Obsidian. :)

If you open this in Obsidian you can graph the notes.

Here is an awesome resource from patrickd who is in Epoch0: Link (Place in the contracts folder on Remix)

Slot 1 - Ethereum101

Topics

Blog Article

Article on "Ethereum 101"

Course Videos

  1. Block 1
  2. Block 2
  3. Block 3
  4. Block 4
  5. Block 5

Participant Created Content

Assignment

  1. Read the Ethereum whitepaper: https://ethereum.org/en/whitepaper/
  2. Read the Ethereum yellow paper: https://ethereum.github.io/yellowpaper/paper.pdf
  3. Read Chapters 1, 2, 3, 4, 6, 13 and 14 from Mastering Ethereum: https://github.com/ethereumbook/ethereumbook and other references in Secureums Ethereum 101 article
  4. Browse through topics at https://ethereum.org/en/developers/docs/
  5. Explore blocks, transactions and other protocol internals at https://etherscan.io/

Quiz

Quiz Writeups

Slot 2 - Solidity101

Blog Article

Article on "Solidity 101"

Course Videos

  1. Block 1
  2. Block 2
  3. Block 3
  4. Block 4
  5. Block 5

Participant Created Content

Assignment

  1. Read Chapter 7 from Mastering Ethereum: https://github.com/ethereumbook/ethereumbook/blob/develop/07smart-contracts-solidity.asciidoc
  2. Understand Solidity syntax and semantics implemented in OpenZeppelins ERC20 contract: https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/contracts/token/ERC20/ERC20.sol
  3. Understand Solidity syntax and semantics implemented in OpenZeppelins ERC721 (NFT) contract: https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/contracts/token/ERC721/ERC721.sol
  4. Understand Solidity syntax and semantics implemented in OpenZeppelins security-related contracts Ownable, Pausable and ReentrancyGuard: https://github.com/OpenZeppelin/openzeppelin-contracts/tree/master/contracts/access and https://github.com/OpenZeppelin/openzeppelin-contracts/tree/master/contracts/security
  5. Experiment with the various Solidity concepts using https://remix.ethereum.org/

Quiz

Quiz Writeups

Slot 3 - Solidity201

Blog

Article on "Solidity 201"

Youtube Videos

  1. Block 1
  2. Block 2
  3. Block 3
  4. Block 4
  5. Block 5

Participant Created Content

Assignment

  1. Understand all the OpenZeppelin Library contracts (many of which are widely-used): https://github.com/OpenZeppelin/openzeppelin-contracts/tree/master/contracts
  2. Understand Solidity syntax and semantics implemented in Uniswap V3 contracts and related dependencies: https://github.com/Uniswap/uniswap-v3-core/tree/main/contracts
  3. Understand Solidity syntax and semantics implemented in Fei Protocol contracts and related dependencies: https://github.com/fei-protocol/fei-protocol-core/tree/master/contracts
  4. Understand Solidity syntax and semantics implemented in Chainlink contracts and related dependencies: https://github.com/smartcontractkit/chainlink/tree/develop/contracts/src/v0.4
  5. Understand Solidity syntax and semantics implemented in Opyn Gamma Protocol contracts and related dependencies: https://github.com/opynfinance/GammaProtocol/tree/master/contracts/core

Quiz

Quiz Writeups

Slot 4 - Pitfalls and Best Practices 101

Blog

Article on "Security Pitfalls & Best Practices 101"

Youtube Videos

  1. Block 1
  2. Block 2
  3. Block 3
  4. Block 4
  5. Block 5

Participant Created Content

Assignment

  1. Explore the SWC Registry list and test cases: https://swcregistry.io/
  2. Watch Intro to Security First Development by Gonalo S @GNSPS, ConsenSys Diligence: https://www.youtube.com/watch?v=72K57I9yvyI
  3. Watch Protect your Crypto and Avoid Getting Hacked by Mehdi Zerouali @ethzed, Sigma Prime: https://www.youtube.com/watch?v=L2DRC6PjTgk
  4. Watch DeFi Security: With So Many Hacks, Will It Ever Be Safe? on Unchained Podcast with Dan Guido @dguido (Trail of Bits) and Taylor Monahan (MyCrypto): https://www.youtube.com/watch?v=Sc5fZ-Wprx8
  5. Attempt CTF: https://capturetheether.com/

Quiz

Quiz Writeups

Slot 5 - Pitfalls and Best Practices 201

Blog

Article on "Security Pitfalls & Best Practices 201"

Youtube Videos

  1. Block 1
  2. Block 2
  3. Block 3
  4. Block 4
  5. Block 5

Participant Created Content

Assignment

  1. Read https://samczsun.com/so-you-want-to-use-a-price-oracle/ and https://samczsun.com/the-dangers-of-surprising-code/
  2. Watch Security By Design & Smart Contract Audits by Shayan Eskandari, Ex-ConsenSys Diligence: https://www.youtube.com/watch?v=gfD1KBtLWZI
  3. Watch How to Build Secure Smart Contracts by Josselin Feist (@Josselin Feist - Trail of Bits), Trail of Bits: https://www.youtube.com/watch?v=yP01yH4plT8
  4. Watch White Hat Panel: DeFi Exploits: https://www.youtube.com/watch?v=Df2zzfoTfMc
  5. Attempt CTF: https://www.damnvulnerabledefi.xyz/

Quiz

Quiz Writeups

Slot 6 - Audit Techniques & Tools 101

Blog

Article on "Audit Techniques & Tools 101"

Youtube Videos

  1. Block 1
  2. Block 2
  3. Block 3
  4. Block 4
  5. Block 5

Participant Created Content

Assignment

  1. Read the following:
    1. How to Prepare for a Smart Contract Audit: https://consensys.net/diligence/blog/2019/09/how-to-prepare-for-a-smart-contract-audit/
    2. What is a Security Audit, When You Should Get One, and How to Prepare (by @petty) : https://our.status.im/what-is-a-security-audit-when-you-should-get-one-and-how-to-prepare/
    3. 246 Findings From our Smart Contract Audits: An Executive Summary: https://blog.trailofbits.com/2019/08/08/246-findings-from-our-smart-contract-audits-an-executive-summary/
  2. Run MythX on Fei Protocol contracts and analyze the reported findings: https://github.com/fei-protocol/fei-protocol-core/tree/master/contracts
  3. Run Slither on Uniswap V3 contracts and analyze the reported findings: https://github.com/Uniswap/uniswap-v3-core/tree/main/contracts
  4. Watch The Evolution of Smart Contract Security by Dan Guido, Trail of Bits: https://www.youtube.com/watch?v=fOkQuNzVn_Q
  5. Attempt Paradigm CTF: https://github.com/paradigm-operations/paradigm-ctf-2021

Quiz

Quiz Writeups

Slot 7 - Audit Findings 101

Blog

Article on "Audit Findings 101"

Youtube Videos

  1. Block 1
  2. Block 2
  3. Block 3
  4. Block 4
  5. Block 5

Participant Created Content

Assignment

  1. Read the audit report along with the smart contracts to understand all the reported findings for Fei Protocol: https://consensys.net/diligence/audits/2021/01/fei-protocol
  2. Read the audit report along with the smart contracts to understand all the reported findings for Uniswap V3: https://github.com/Uniswap/uniswap-v3-core/blob/main/audits/tob/audit.pdf
  3. Read the audit report along with the smart contracts to understand all the reported findings for Chainlink: https://github.com/sigp/public-audits/blob/master/chainlink-1/review.pdf
  4. Read the audit report along with the smart contracts to understand all the reported findings for Opyn Gamma protocol: https://blog.openzeppelin.com/opyn-gamma-protocol-audit/
  5. Watch: OpenZeppelin @tinchoabbate's Secure Development Series: https://www.youtube.com/playlist?list=PLdJRkA9gCKOONBSlcifqLig_ZTyG_YLqz

Quiz

Quiz Writeups

Slot 8 Audit Findings 201

Blog

Article on "Audit Findings 201"

Youtube Videos

  1. Block 1
  2. Block 2
  3. Block 3
  4. Block 4
  5. Block 5

Participant Created Content

Assignment

  1. Read the audit report along with the smart contracts to understand all the reported findings for 1inch Liquidity Protocol: https://consensys.net/diligence/audits/2020/12/1inch-liquidity-protocol/
  2. Read the audit report along with the smart contracts to understand all the reported findings for Origin Dollar: https://github.com/trailofbits/publications/blob/master/reviews/OriginDollar.pdf
  3. Read the audit report along with the smart contracts to understand all the reported findings for Synthetix EtherCollateral: https://github.com/sigp/public-audits/blob/master/synthetix/ethercollateral/review.pdf
  4. Read the audit report along with the smart contracts to understand all the reported findings for Holdefi: https://blog.openzeppelin.com/holdefi-audit
  5. Stay updated with Ethereum security articles/news:
    1. WeekInEthereumNews (security section): https://weekinethereumnews.com/
    2. BlockThreat Newsletter: https://www.blockthreat.io/
    3. Rekt: https://rekt.news/
    4. Secureum Newsletter: https://secureum.substack.com/

Quiz

Quiz Writeups

Extras

Related Projects
smartcontract-apps

这是一个面向中文社区，分析市面上智能合约应用的架构与实现的仓库。

27 Jan 2022 1,287
ethdev-diary

It will help you to be a Ethereum developer from nothing. I will record every learning sources an...

22 Jun 2020 26
solidity

Solidity, the Smart Contract Programming Language

17 Aug 2015 22,570
peersky-cocoa-webiste

Collection of various smart contracts that all together from a DAO in cup of my cacao...

03 Jul 2022 5
full-blockchain-solidity-course-py

Ultimate Solidity, Blockchain, and Smart Contract - Beginner to Expert Full Course | Python Edition

27 Jul 2021 10,759
Web3Bugs

Demystifying Exploitable Bugs in Smart Contracts

11 Feb 2023 1,518
eattheblocks

Source code for Eat The Blocks, a screencast for Ethereum Dapp Developers

01 Nov 2017 3,998
WTF-Solidity

WTF Solidity 极简入门教程，供小白们使用。Now supports English! 官网: https://wtf.academy

02 Apr 2022 11,333
awesome-ethereum

Awesome Ethereum Resources

01 Mar 2016 855
Awesome-Smart-Contract-Security

A curated list of Smart Contract Security materials and resources For Researchers

05 May 2022 672
building-secure-contracts

Guidelines and training material to write secure smart contracts

10 Jan 2020 2,094
Blockchain-Development-Resources

The contents of this repository will help you launch a career in Blockchain development. How to d...

26 Aug 2021 1,210
Solidity-Learning

Solidity 学习笔记

05 Jul 2022 25
Web3-Wisdom-Vault

This repository serves as a comprehensive knowledge base for Web3 technologies, concepts, and app...

12 Aug 2024 0
awesome-ethereum-security

A curated list of awesome Ethereum security references

10 Aug 2018 1,266