Learn smart contract security.

Reentrancy Oracle attacks Auditor roadmap AI auditing Hack postmortems

Start with a clear next step.

  1. 01

    Become an auditor

    Build the foundations, tools, reporting habits, and first proof-of-skill portfolio.

    Follow the roadmap
  2. 02

    Study real attacks

    Read incident breakdowns that connect exploit mechanics to review checklists.

    Read postmortems
  3. 03

    Practice audit workflow

    Use the checklist and supporting guides to review contracts with structure.

    Open checklist

Browse by the work you are doing.

Most read articles →
Security guides

Core concepts, methodology, tools, and auditing mental models.
Career guides

Roadmaps, positioning, interview prep, and portfolio-building advice.
Hack postmortems

Real DeFi incidents explained through attacker incentives and code paths.

Latest research.

Aug 19 6 min read Ethernaut Fallout Solution: Foundry Walkthrough Solve Ethernaut level 2 with Foundry. A single mistyped character turns the constructor into a public function anyone can call to take ownership. Aug 19 5 min read Ethernaut Fallback Solution: Foundry Walkthrough Solve Ethernaut level 1 with Foundry. Take ownership through the receive() function and drain the contract, then see why this bug class still shows up in audits. Aug 19 7 min read Ethernaut Coin Flip Solution: Foundry Walkthrough Solve Ethernaut level 3 with Foundry. Win ten coin flips in a row by reading the same block hash the contract reads, and learn why on-chain randomness fails. Jun 24 12 min read Smart Contract Auditor Salary Benchmark Report 2026 A 2026 benchmark report on smart contract auditor salaries across full-time roles, freelance work, contest earnings, geography, and specialization premiums. Apr 02 16 min read Drift Protocol Hack: Durable Nonces, Admin Capture, and the $250M+ Solana Drain The Drift Protocol hack was not a generic smart contract bug. It appears to have been a staged admin capture that used durable nonces, privileged state changes, and fast fund extraction to drain more than $250 million. Mar 25 10 min read Cairo Smart Contract Security: How to Audit Starknet Without Missing the Real Risks Audit Cairo and Starknet contracts: account abstraction, L1-L2 messaging, felt252 risks, and the tools used to check them.