Contributor: Script Money
Full-stack engineer familiar with Web3 development ecosystem, has written some technical tutorials
This article is the fifth installment of the Web3 Quality Education Resources Recommended Series produced by CryptoChasers - Solidity Advanced. The previous article [Solidity Intermediate] ([https://cryptochasers.xlog.app/best-tutorial-04-solidity-2]) provided many high-quality EVM-related materials to help developers learn. This advanced tutorial mainly focuses on the field of contract security, learning Solidity advanced knowledge by reproducing historical hacker events and solving CTF (cybersecurity competition) puzzles.
Recommended Tutorials#
Web3 Security#
- Website: web3sec.xrex.io
- Language: English/Chinese
- Content: Index
This is a Notion maintained by white hat SunSec, which contains various resources, tutorials, tools, and other content related to Web3 security. It is a treasure trove and worth browsing, including some Chinese materials. Among them, the most highly acclaimed open-source library DeFiHackLabs records the attack methods of various DeFi security incidents in history. It is written by Foundry and has been continuously updated. Highly recommended.
Puzzlebox.sol#
- Website: ctf.dragonfly.xyz
- Language: English
- Content: Puzzles
CTF initiated by investment institution dragonfly, highly praised by technical experts in the community. The content of the competition is to interact step by step with the functions designed in the puzzlebox contract until the box is completely opened. Each step does not have a fixed solution, and the higher the score, the smaller the optimized gas consumption. To achieve a high score, you need to show great skills. You can try it yourself first and then learn from others' solutions.
Paradigm CTF 2022#
- Website: github.com/paradigmxyz/paradigm-ctf-2022
- Language: English
- Content: Puzzles
CTF initiated by research-oriented investment institution Paradigm, also has a 2021 version. It is another CTF highly praised by technical experts in the community, with a large difference in difficulty level of the questions. It is quite challenging to complete all of them. After deploying the local environment, call the solve function of the puzzle contract by writing scripts or contracts, and then send a request to get the score. There are puzzles in Cairo 0 (the development language of StarkNet) and Solana chain, which can be chosen not to be viewed. It is not yet certain whether there will be Paradigm CTF 2023 this year. If you want to score, you can take a look at the latest Cairo in advance.
Summary#
The recommended materials above are mainly based on the suggestions of some experts in the community, so well-known CTFs like ethernaut are not separately recommended because their difficulty is too simple. Good content lies in its essence. If it is not enough to learn, you can find other materials in the Web3Sec library. If you think you are very capable, participate in newly launched CTFs and enjoy the excitement of competition.