Smart Contract Security Resources

Auditor Roadmap

Solidity basics through your first paid audit. What to learn, in what order, and how to tell when you are ready for public contests.

AI Auditing Guide

Where AI speeds up a review, and where it invents findings that do not exist. The prompts worth using, and how to check what comes back.

Hack Dataset

3,805 recorded incidents across 126 chains. Filter by technique or by how much the protocol lost.

Audit Cost Estimator

Calculate smart contract audit costs based on code complexity, lines of code, and project requirements.

Web3 Hacks Dashboard

Explore the complete database of DeFi hacks, Web3 attacks, and crypto exploits. Filter by chain, attack type, and amount lost.

Most Expensive Hacks Leaderboard

See the biggest crypto hacks ranked by amount lost. Explore top incidents, attack patterns, and chain-level impact.

Function Selector Calculator

Compute Solidity function selectors, event topic hashes, and error selectors from signatures using keccak256.

AI Skills Explorer

Discover, compare, and copy AI skill files for smart contract auditing. 60+ skills from top security teams - with safety labels and one-click copy for Claude, Cursor & MCP.

Smart Contract CTF Library

Find Web3 security CTFs, Solidity wargames, DeFi exploit labs, writeups, and a practical solving path.

Auditor Readiness Quiz

Free 18-question quiz that assesses your readiness to become a smart contract auditor. Get scored by skill domain and receive a personalized roadmap.

Smart Contract Auditor Roadmap

Answer a few practical questions and get a personalized EVM, Cairo, or combined smart contract security learning path.

Smart Contract Auditor Jobs

Live smart contract auditor and Web3 security jobs from protocol teams, security firms, and crypto job boards. Filter by language, ecosystem, focus, and remote work.

Smart Contract Audit Checklist

Build a protocol-specific audit checklist and report outline for EVM, DeFi, governance, bridge, token, or Cairo reviews.

Access Control Attacks

Access control vulnerabilities let unauthorized accounts execute privileged operations. OWASP ranks broken access control first in its 20...

Arithmetic Overflow & Underflow Attacks

Integer overflow and underflow attacks have drained over $1 billion from Decentralized Finance (DeFi) protocols and web3 projects. In Apr...

Delegatecall & Call Injection Attacks

The Parity Wallet hack froze $150 million and showed that a single vulnerability can permanently destroy an entire protocol. In November ...

Flash Loan Attacks

A flash loan attack uses uncollateralized, same-transaction borrowing to amplify a separate protocol weakness. The loan is not usually th...

Oracle Manipulation & Price Manipulation

On October 26, 2020, an attacker used price manipulation to extract $34 million from Harvest Finance in about seven minutes. The incident...

Reentrancy

Reentrancy is the classic smart contract vulnerability for a reason: it teaches one of the most important audit lessons in Web3 security....

Smart Contract Attack Library

16 vulnerability classes, each with the exploit mechanics and the incidents where it cost someone real money.

Smart Contract Security Glossary

163 terms across Solidity, the EVM, DeFi, and signature security. Every entry ends with the audit check that catches it.

Most Expensive Crypto Hacks

The largest losses in Web3, ranked by amount. The same few mistakes keep showing up near the top of the list.

Smart Contract Auditing Course

Our paid course. You write working exploits against vulnerable contracts, then learn to write the report that gets a protocol to fix them.

Cairo Security Training

Starknet does not behave like the EVM. Separate training for auditors who need to review Cairo contracts.