<aside> ℹ️ The primary purpose of this road map is to document the resources that piqued my interest throughout the studies of the security perspective and the underlying technologies of this ecosystem.

⭐ → highlighted article 👌🏽 → personal liking ♦️ → mandatory to read / check out / save for later

*Updated 31 Jan with:

• Link to Vulnerable spots for lending protocols.* U*pdated 25 Jan 2023 with:
• Secureum category at the end w/ Mindmap.*

</aside>

Table of contents

Main road-map

1. Introduction to Blockchain
   • [ ] Blockchain fundamentals (⭐) by Dan Boneh
   • [ ] Blockchain demo (interactive) (♦️) — I always use this when I have to explain the basics!
2. Introduction to Solidity
   1. Quick start
      • [ ] Solidity walk-through — suuper quick glance at Solidity
      • [ ] 🧟 CryptoZombies — brief but entertaining
      • [ ] Solidity by example (⭐) — check video explanations!
   2. Ideal
      • [ ] HardHat's tutorial (👌🏽) — first tooling experience
      • [ ] FreeCodeCamp 32 hours course (⭐👌🏽) — totally recommended (uses Hardhat)
      • [ ] Tic Tac Token — select a kata, and start a short project on Foundry
   3. Additional
      • [ ] 🏃🏾‍♀️SpeedrunEthereum (⭐)
      • [ ] ‣ — suggestions after scaffold-eth
      • [ ] 🐰 RabbitHole — L2, DeFi, NFT, DAOs!
3. Introduction to the EVM
   1. Quick start
      • [ ] Take glimpse over Yul — the intermediary language
      • [ ] EVM Codes ♦️ — incredible tool and resource
      • [ ] EtherVM ⭐ — read at least once
      • [ ] https://github.com/fvictorio/evm-puzzles https://github.com/daltyboy11/more-evm-puzzles 👌🏽— play with these challenges
        • [ ] solving more-evm-puzzles diferrently by matta. 👌🏽
   2. Strongly recommended
      • [ ] 🧩 yet-another-evm-puzzle by matta. ⭐ — puzzles with a realistic twist
      • [ ] Solving yet another EVM puzzle by tincho ⭐ — amazing write-up
   3. Further reading
      • [ ] Solidity data representation
      • [ ] The EVM Handbook — large collection of sources
4. Skim through / read a bit of / know that this exists and is important
   • [ ] Latest Solidity documentation ♦️ — official readthedocs for Solidity
   • [ ] OpenZeppelin's contracts ⭐ — most reused Solidity code on the blockchain
   • [ ] What’s a computer hacker? and other popular questions — seeking motivation?
5. Road-maps / general guides / classes / courses
   1. Quick reading
      • [ ] A Journey Into Smart Contract Security (👌🏽) — short collection of articles I’ve written
      • [ ] How to become a smart contract auditor (⭐👌🏽) by cmichelli
      • [ ] How to Develop Smart Contracts for Ethereum Blockchain by web3.career
      • [ ] Roadmap for Web3/Smart Contracts hacking 2022 by sm4rty
   2. Will take a while
      • [ ] Working in Web3: The handbook (⭐) by smsunarto
      • [ ] https://github.com/fravoll/solidity-patterns (👌🏽) — Some known Solidity patterns
   3. Buckle up
      • [ ] Cryptocurrency Class 2022 by Patrick McCorry (Infura)
      • [ ] Useful solidity patterns (👌🏽)
   4. Alternative
      • [ ] How to become an auditor & hunter by CIA Officer 👮🏻‍♂️
      • [ ] ‣
6. Security specific content
   • [ ] Hack the blockchain: Blockchain Security Guide. — very long, and similar to this list
   • Good practices and patterns
     • Solidity security anti-patterns — a great list
     • DeFi security practices
     • https://github.com/crytic/building-secure-contracts
     • https://github.com/sigp/solidity-security-blog — list of known attack vectors and common anti-patterns
   • [ ] Check out the ultimate checklist
   • [ ] Understand SWC Registry
   • Check out the following repositories
     • ‣ — Smart Contract Security Verification Standard
     • https://github.com/Rivaill/CryptoVulhub — attack events or vulnerabilities
     • more repos at the end
   • theauditorbook.com — a book about high to mid vulns from Codearena & Sherlock
7. Play a bit with
   • [ ] Real-scenarios alike
     • [ ] 👾 Damn Vulnerable Defi (♦️) by tinchoabbate
     • [ ] https://github.com/eugenioclrc/DeFi-Security-Summit-Stanford — short and interesting
       • [ ] Follow the solutions with my walk-through (⭐) — I really did put effort on this serie
   • [ ] Some more
     • [ ] 🧑🏽‍🚀 Ethernaut (⭐)
       • [ ] Solutions by cmichel
     • [ ] ✊🏽 Capture the ether by smarx
     • [ ] Ethereum Hacker
   • [ ] Find more under CTFs category below
8. Create content on your own
   1. Quick start
      • [ ] Post on forum / social network about something you’ve found useful
      • [ ] Post your solution for a challenge
   2. A step further
      • [ ] Create a challenge and share it!
      • [ ] Create a post sharing something you’ve found useful
9. Bounties
   • Blockchain & Web3
     • 👽 Immunefi — web3 bug bounty platform
     • ⌛ Code4rena — crowdsourced web3 bug bounty platform
     • ⭕ HackenProof — web3 bug bounty platform
     • 🪙 GitCoin bounties — bounty collaboration
   • General purpose platforms
     • 1️⃣ HackerOne
     • 🐞 Bugcrowd
10. Projecting jobs? Go back to 2. as well
    • [ ] Differentiate where your skills excel and look for project's affinity
    • [ ] Involve / engage more in communities / projects that you like
      • [ ] Recommended discords
        • [ ] WebtrES (Spanish)
        • [ ] ManijasDev (Spanish)
        • [ ] EthSecurity (English)
    • [ ] Look for apprenticeships / fellowships / internships
    • [ ] Or even your first job too! — thanks @tomasfrancisco for contributing with links
      • web3.career
      • web3internships.com
      • www.alljobsinweb3.com
      • cryptocurrencyjobs.co
      • crypto.jobs
      • defi.jobs
      • jobs.buildspace.so
      • useweb3.xyz
      • web-3.pallet.com
      • pompcryptojobs.com
      • remote3.co
      • web3 job spreadsheet - updated daily

Tools

Utilities

• ‣ — replace etherscan.io/[tx] with etherscan.deth.net/[tx] and see what happens ;)
• 🔎 4byte directory | sig.eth — a database with known function selectors