Skip to content

Commit

Permalink
Merge pull request #6 from JinXJinX/main
Browse files Browse the repository at this point in the history
Updated a few dead links
  • Loading branch information
Kong-F authored Feb 17, 2025
2 parents 23d0369 + f908f05 commit 9fbda7a
Show file tree
Hide file tree
Showing 2 changed files with 28 additions and 28 deletions.
28 changes: 14 additions & 14 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -132,7 +132,7 @@ Resources and Tools for Mastering Smart Contracts with Solidity
- Understanding what upgradable contracts/proxy contracts are

* [Introduction to different proxy contract patterns](https://ethereum-blockchain-developer.com/110-upgrade-smart-contracts/00-project/)
* [Proxies Deep Dive](https://proxies.yacademy.dev/pages/proxies-list/)
* [Proxies Deep Dive](https://proxies.yacademy.dev/pages/Proxies-List/)
* [OpenZeppelin Proxy](https://docs.openzeppelin.com/contracts/4.x/api/proxy) implementation documentation

- Learning to Write Smart Contracts
Expand Down Expand Up @@ -167,8 +167,8 @@ Resources and Tools for Mastering Smart Contracts with Solidity
* [Quick transaction simulations](https://docs.tenderly.co/simulations-and-forks/intro-to-simulations)
* [Visual transaction debugging tools](https://docs.tenderly.co/debugger/how-to-use-tenderly-debugger)
* [Sentio](https://app.sentio.xyz/explorer)
* [Online debugging with code insight](https://docs.sentio.xyz/sentio-debugger/code-insight)
* [Simulation with contract overrides](https://docs.sentio.xyz/sentio-debugger/simulation#override-contract)
* [Online debugging with code insight](https://docs.sentio.xyz/docs/code-insight)
* [Simulation with contract overrides](https://docs.sentio.xyz/docs/simulation#override-contract)
* Interacting with Smart Contracts
* Understanding [JSON-RPC](https://ethereum.org/en/developers/docs/apis/json-rpc/)
* [ethers.js](https://docs.ethers.org/)
Expand Down Expand Up @@ -248,7 +248,7 @@ After an initial understanding of what DeFi is, it's important to delve deeper i
- Protocol [Overview](https://docs.convexfinance.com/convexfinance/)
- [Technical Documentation](https://docs.convexfinance.com/convexfinanceintegration/)
- [Yearn Finance](https://docs.yearn.fi/getting-started/intro) (Yield Aggregator)
- [GMX](https://gmxio.gitbook.io/gmx/) (Derivatives)
- [GMX](https://docs.gmx.io/docs/intro/) (Derivatives)
- [Nexus Mutual](https://docs.nexusmutual.io/overview/) (Insurance)
- [OpenSea](https://github.com/ProjectOpenSea/seaport#seaport) (NFT Marketplace)
- [Set Protocol](https://docs.tokensets.com/) (Index Funds)
Expand Down Expand Up @@ -280,14 +280,14 @@ DeFi isn't solely about smart contracts; the frontend and backend are vital comp
- [TrailOfBits](https://blog.trailofbits.com/)
- [Secureum](https://secureum.substack.com/)
- [Openzeppelin](https://blog.openzeppelin.com/security-audits/)
- [OfferCIA](https://officercia.mirror.xyz/)
- [OfficerCIA](https://officercia.mirror.xyz/)

### **5. Reviewing Audit Reports**

During an audit, an individual's perspective may miss certain aspects and cannot cover all scenarios. Therefore, reading other people's audit reports is crucial to learn different methods of vulnerability discovery and various auditing thought processes.

- [SlowMist Audit Reports](https://github.com/slowmist/Knowledge-Base)
- [Solodit Aggregation](https://solodit.xyz/)
- [Solodit Aggregation](https://solodit.cyfrin.io/)
- [Code4rena Audit Reports](https://code4rena.com/reports)
- [Consensys Audit Reports](https://consensys.net/diligence/audits/)
- [QuillAudits Audit Reports](https://github.com/Quillhash/QuillAudit_Reports)
Expand All @@ -307,7 +307,7 @@ During an audit, an individual's perspective may miss certain aspects and cannot
Engage in more advanced CTF challenges to test new skills and grow

- [EtherHack](https://etherhack.positive.com/)
- [SI Blockchain CTF](https://blockchain-ctf.securityinnovation.com/)
- [SI Blockchain CTF](https://github.com/SecurityInnovation/Smart-Contract-CTF)
- [QuillCTF](https://www.quillaudits.com/academy/ctf)
- [Curta CTF](https://www.curta.wtf/)
- [Paradigm CTF](https://ctf.paradigm.xyz/)
Expand All @@ -324,7 +324,7 @@ Through the exploration of leading DeFi platforms, a profound understanding of D
The EVM (Ethereum Virtual Machine) is responsible for executing smart contract instructions. A comprehensive understanding of the EVM aids in a more in-depth grasp of the deployment, invocation, execution, and data storage of smart contracts. This foundational knowledge is also pivotal for Gas optimization and discovering vulnerabilities.

- [About EVM](https://www.evm.codes/about)
- [The EVM From Scratch Book](https://evm-from-scratch.xyz/intro)
- [The EVM From Scratch Book](https://evm-from-scratch.xyz/content/01_intro.html)
- Noxx's [In-depth Research on EVM](https://noxx.substack.com/p/evm-deep-dives-the-path-to-shadowy)
- [Parsing Solidity Slot Data](https://ethdebug.github.io/solidity-data-representation/)
- [Ethereum Yellow Paper](https://ethereum.github.io/yellowpaper/paper.pdf)
Expand All @@ -346,7 +346,7 @@ The economic model is a core component of DeFi products, so it's essential to un

- [Governance Risks](https://arxiv.org/abs/2308.04267)
- [Summary of Risks in DeFi Economic Models](https://github.com/engn33r/DeFi-Risk-Modelling-Awesome)
- [Euler Oracle Manipulation Tool](https://oracle.euler.finance/)
- [Euler Oracle Manipulation Tool](https://github.com/euler-xyz/euler-oracle-tools)
- [Chaos Lab Uniswap v3 Oracle Manipulation Risk](https://community.chaoslabs.xyz/uniswap/twap)
- [Agent Buttercup simulation engine](https://github.com/Cozy-Finance/agent-buttercup)
- [Curve simulation tool](https://github.com/curveresearch/curvesim)
Expand Down Expand Up @@ -382,14 +382,14 @@ Learning from other outstanding peers who are researching various topics can pro
After independently auditing numerous complex projects, accumulating extensive knowledge, and experiencing various business scenarios, auditors should be able to respond quickly to unforeseen security incidents and conduct rapid analysis and reporting. Here are some commonly used analysis tools:

- Contract Decompilation Tools
- [Dedaub](https://library.dedaub.com/decompile)
- [Dedaub](https://app.dedaub.com/decompile)
- [Panoramix](https://github.com/palkeo/panoramix)
- [abi-decompiler](https://github.com/Decurity/abi-decompiler)
- [heimdall-rs](https://github.com/Jon-Becker/heimdall-rs)
- [ethervm](https://ethervm.io/decompile)
- [Pyevmasm](https://github.com/crytic/pyevmasm)
- Transaction Analysis Tools
- [Phalcon](https://explorer.phalcon.xyz/)
- [blocksec](https://app.blocksec.com/explorer/)
- [ethtx.info](https://ethtx.info/)
- [Tx eth samczsun](https://tx.eth.samczsun.com/)
- [Tenderly](https://tenderly.co/)
Expand Down Expand Up @@ -460,9 +460,9 @@ Creativity is the weapon that allows us to conquer challenges and the essential

Special thanks to friends who provided valuable feedback:

- [Cos](https://twitter.com/evilcos)
- [23pds](https://twitter.com/IM_23pds)
- [T41nk](https://twitter.com/T41nk_)
- [Cos](https://x.com/evilcos)
- [23pds](https://x.com/im23pds)
- [T41nk](https://x.com/T41nk_)
- Doublenine
- Flush
- Blue
Expand Down
28 changes: 14 additions & 14 deletions README_CN.md
Original file line number Diff line number Diff line change
Expand Up @@ -127,7 +127,7 @@ English version: **[SlowMist Learning Roadmap for Becoming a Smart Contract Audi
- 学习[ OpenZeppelin Token](https://github.com/OpenZeppelin/openzeppelin-contracts/tree/master/contracts/token) 部分的实现
- 了解可升级合约/代理合约是什么
- [不同模式的代理合约介绍](https://ethereum-blockchain-developer.com/110-upgrade-smart-contracts/00-project/)
- [代理合约深入研究](https://proxies.yacademy.dev/pages/proxies-list/)
- [代理合约深入研究](https://proxies.yacademy.dev/pages/Proxies-List/)
- [OpenZeppelin Proxy](https://docs.openzeppelin.com/contracts/4.x/api/proxy) 实现文档
- 学习智能合约编写
- [WTF Solidity 智能合约教程](https://www.wtf.academy/)
Expand Down Expand Up @@ -157,8 +157,8 @@ English version: **[SlowMist Learning Roadmap for Becoming a Smart Contract Audi
- 快速[交易模拟](https://docs.tenderly.co/simulations-and-forks/intro-to-simulations)
- [可视化的交易 Debug 工具](https://docs.tenderly.co/debugger/how-to-use-tenderly-debugger)
- [Sentio](https://app.sentio.xyz/explorer)
- [用代码索引做在线Debug](https://docs.sentio.xyz/sentio-debugger/code-insight)
- [交易模拟中覆盖合约](https://docs.sentio.xyz/sentio-debugger/simulation#override-contract)
- [用代码索引做在线Debug](https://docs.sentio.xyz/docs/code-insight)
- [交易模拟中覆盖合约](https://docs.sentio.xyz/docs/simulation#override-contract)
- 与智能合约交互
- 了解 [JSON-RPC](https://ethereum.org/en/developers/docs/apis/json-rpc/)
- [ethers.js](https://docs.ethers.org/)
Expand Down Expand Up @@ -238,7 +238,7 @@ English version: **[SlowMist Learning Roadmap for Becoming a Smart Contract Audi
- [协议介绍](https://docs.convexfinance.com/convexfinance/)
- [技术文档](https://docs.convexfinance.com/convexfinanceintegration/)
- [Yearn Finance](https://docs.yearn.fi/getting-started/intro) (Yield Aggregator)
- [GMX](https://gmxio.gitbook.io/gmx/) (Derivatives)
- [GMX](https://docs.gmx.io/docs/intro/) (Derivatives)
- [Nexus Mutual](https://docs.nexusmutual.io/overview/) (Insurance)
- [OpenSea](https://github.com/ProjectOpenSea/seaport#seaport) (NFT Marketplace)
- [Set Protocol](https://docs.tokensets.com/) (Indexes)
Expand Down Expand Up @@ -270,14 +270,14 @@ DeFi 并不局限于智能合约,前端、后端也是其重要的组成部分
- [TrailOfBits](https://blog.trailofbits.com/)
- [Secureum](https://secureum.substack.com/)
- [Openzeppelin](https://blog.openzeppelin.com/security-audits/)
- [OfferCIA](https://officercia.mirror.xyz/)
- [OfficerCIA](https://officercia.mirror.xyz/)

#### **5. 阅读审计报告**

在进行审计时,个人的角度总是会有所遗漏,无法覆盖所有情况。因此通过阅读他人的审计报告以学习不同的漏洞发现方式和审计思考方式很重要。

- [SlowMist Audit Reports](https://github.com/slowmist/Knowledge-Base)
- [Solodit Aggregation](https://solodit.xyz/)
- [Solodit Aggregation](https://solodit.cyfrin.io/)
- [Code4rena Audit Reports](https://code4rena.com/reports)
- [Consensys Audit Reports](https://consensys.net/diligence/audits/)
- [QuillAudits Audit Reports](https://github.com/Quillhash/QuillAudit_Reports)
Expand All @@ -297,7 +297,7 @@ DeFi 并不局限于智能合约,前端、后端也是其重要的组成部分
进行较有难度的 CTF 挑战以巩固知识。

- [EtherHack](https://etherhack.positive.com/)
- [SI Blockchain CTF](https://blockchain-ctf.securityinnovation.com/)
- [SI Blockchain CTF](https://github.com/SecurityInnovation/Smart-Contract-CTF)
- [QuillCTF](https://www.quillaudits.com/academy/ctf)
- [Curta CTF](https://www.curta.wtf/)
- [Paradigm CTF](https://ctf.paradigm.xyz/)
Expand All @@ -314,7 +314,7 @@ DeFi 并不局限于智能合约,前端、后端也是其重要的组成部分
EVM 负责执行智能合约指令,深入了解 EVM 有助于我们对智能合约的部署、调用、执行、数据存储有更为深入的理解。同时可以为 Gas 优化、漏洞发现打好基础。

- [关于 EVM](https://www.evm.codes/about)
- [The EVM From Scratch Book](https://evm-from-scratch.xyz/intro)
- [The EVM From Scratch Book](https://evm-from-scratch.xyz/content/01_intro.html)
- [Noxx EVM 深入研究](https://noxx.substack.com/p/evm-deep-dives-the-path-to-shadowy)
- [Solidity 插槽数据解析](https://ethdebug.github.io/solidity-data-representation/)
- [以太坊黄皮书](https://ethereum.github.io/yellowpaper/paper.pdf)
Expand All @@ -336,7 +336,7 @@ EVM 负责执行智能合约指令,深入了解 EVM 有助于我们对智能

- [治理风险](https://arxiv.org/abs/2308.04267)
- [DeFi 经济模型风险汇总](https://github.com/engn33r/DeFi-Risk-Modelling-Awesome)
- [Euler Oracle Manipulation Tool](https://oracle.euler.finance/)
- [Euler Oracle Manipulation Tool](https://github.com/euler-xyz/euler-oracle-tools)
- [Chaos Lab Uniswap v3 Oracle Manipulation Risk](https://community.chaoslabs.xyz/uniswap/twap)
- [Agent Buttercup simulation engine](https://github.com/Cozy-Finance/agent-buttercup)
- [Curve simulation tool](https://github.com/curveresearch/curvesim)
Expand Down Expand Up @@ -372,14 +372,14 @@ EVM 负责执行智能合约指令,深入了解 EVM 有助于我们对智能
在独立审计过足够多的复杂项目,并经历过各种业务场景,沉淀了大量知识后,能够使我们快速应对突发安全事件并进行快速分析与输出。下面是一些常用的分析工具:

- 合约反编译工具
- [Dedaub](https://library.dedaub.com/decompile)
- [Dedaub](https://app.dedaub.com/decompile)
- [Panoramix](https://github.com/palkeo/panoramix)
- [abi-decompiler](https://github.com/Decurity/abi-decompiler)
- [heimdall-rs](https://github.com/Jon-Becker/heimdall-rs)
- [ethervm](https://ethervm.io/decompile)
- [Pyevmasm](https://github.com/crytic/pyevmasm)
- 交易分析工具
- [Phalcon](https://explorer.phalcon.xyz/)
- [blocksec](https://app.blocksec.com/explorer/)
- [ethtx.info](https://ethtx.info/)
- [Tx eth samczsun](https://tx.eth.samczsun.com/)
- [Tenderly](https://tenderly.co/)
Expand Down Expand Up @@ -454,9 +454,9 @@ EVM 负责执行智能合约指令,深入了解 EVM 有助于我们对智能

感谢朋友们对本文提出的宝贵建议。

- [Cos](https://twitter.com/evilcos)
- [23pds](https://twitter.com/IM_23pds)
- [T41nk](https://twitter.com/T41nk_)
- [Cos](https://x.com/evilcos)
- [23pds](https://x.com/im23pds)
- [T41nk](https://x.com/T41nk_)
- Doublenine
- Flush
- Blue
Expand Down

0 comments on commit 9fbda7a

Please sign in to comment.