Contributor: Script Money
Full-stack engineer familiar with Web3 development ecosystem, has written some technical tutorials
This article is the fifth installment of the Web3 Quality Education Resources Recommended Series produced by CryptoChasers - Solidity Advanced. The previous article "Solidity Intermediate" provided many high-quality EVM-related materials to help developers learn. This advanced tutorial mainly focuses on the field of contract security, learning advanced Solidity knowledge by reproducing historical hacker events and solving CTF (cybersecurity competition) puzzles.
Recommended Tutorials#
Web3 Security#
- Website: web3sec.xrex.io
- Language: English/Chinese
- Content: Index
This Notion is maintained by the white hat SunSec and contains various resources, tutorials, tools, and other content related to Web3 security. It is a treasure trove and well worth browsing, including some Chinese materials. Among them, the highly acclaimed open-source library DeFiHackLabs records the attack methods of various DeFi security incidents in history. It is written by Foundry and is constantly updated. Highly recommended.
Puzzlebox.sol#
- Website: ctf.dragonfly.xyz
- Language: English
- Content: Puzzles
The CTF initiated by the investment institution dragonfly has been highly praised by the technical experts in the community. The content of the competition is to interact step by step with the functions designed in the puzzlebox contract until the box is completely opened. Each step does not have a fixed solution, and the higher the score, the smaller the optimized gas consumption. To get a high score, you need to show great skills. You can try it yourself first and then learn from others' solutions.
Paradigm CTF 2022#
- Website: github.com/paradigmxyz/paradigm-ctf-2022
- Language: English
- Content: Puzzles
The CTF initiated by the research-oriented investment institution Paradigm, also has a 2021 version. It is another CTF highly praised by technical experts in the community, with a large difference in difficulty level between the questions. It is quite challenging to complete all of them. After deploying the local environment, you can call the solve function of the puzzle contract by writing scripts or contracts, and then send a request to get the score. There are puzzles in Cairo 0 (the development language of StarkNet) and Solana chain, which can be chosen not to be viewed. It is still uncertain whether there will be Paradigm CTF 2023 this year. If you want to score, you can take a look at the latest Cairo in advance.
Summary#
The recommended materials above are mainly based on the suggestions of some experts in the community, so well-known CTFs like ethernaut with too simple difficulty are not separately recommended. Good content lies in its essence. If it is not enough to learn, you can find other materials in the Web3Sec library. If you think you are very capable, participate in newly launched CTFs and enjoy the excitement of competition.