项目地址：https://github.com/Web3Hack/Web3Hack

本项目是记录自己在学习Web3安全的过程中遇到的优秀内容，包括优秀的学习资源或优秀的项目代码等。尽可能的理解Web3，尽可能的深入理解Web3安全。深入学习Web3安全，直至宇宙重启！作者：[0e0w](https://github.com/0e0w)

本项目创建于2023年11月7日，最近的一次更新时间为2024年4月14日。

*   [0x01-Web3学习资源](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#0x01-web3%E8%B5%84%E6%BA%90%E6%B1%87%E6%80%BB)
    *   |[01-政策法规](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#01-%E6%94%BF%E7%AD%96%E6%B3%95%E8%A7%84)|[02-优秀资源](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#02-%E4%BC%98%E7%A7%80%E8%B5%84%E6%BA%90)|[03-视频教程](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#03-%E8%A7%86%E9%A2%91%E6%95%99%E7%A8%8B)|[04-博客论坛](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#04-%E8%AE%BA%E5%9D%9B%E5%8D%9A%E5%AE%A2)|[05-学术论文](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#05-%E5%AD%A6%E6%9C%AF%E8%AE%BA%E6%96%87)|[06-年度报告](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#06-%E5%B9%B4%E5%BA%A6%E6%8A%A5%E5%91%8A)|[07-地址查询](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#07-%E5%9C%B0%E5%9D%80%E6%9F%A5%E8%AF%A2)|[08-协议技术](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#08-%E5%8D%8F%E8%AE%AE%E6%8A%80%E6%9C%AF)|[09-其他资源](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#09-%E5%85%B6%E4%BB%96%E8%B5%84%E6%BA%90)|
*   [0x02-Web3智能合约](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#0x02-web3%E6%99%BA%E8%83%BD%E5%90%88%E7%BA%A6)
    *   |[01-学习资源](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#01-%E5%AD%A6%E4%B9%A0%E8%B5%84%E6%BA%90)|[02-视频教程](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#02-%E8%A7%86%E9%A2%91%E6%95%99%E7%A8%8B)|[03-知名框架](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#03-%E7%9F%A5%E5%90%8D%E6%A1%86%E6%9E%B6)|[04-开源项目](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#04-%E5%BC%80%E6%BA%90%E9%A1%B9%E7%9B%AE)|[05-安全开发](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#05-%E5%AE%89%E5%85%A8%E5%BC%80%E5%8F%91)|[06-测试框架](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#06-%E6%B5%8B%E8%AF%95%E6%A1%86%E6%9E%B6)|[07-其他资源](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#07-%E5%85%B6%E4%BB%96%E8%B5%84%E6%BA%90)|
*   [0x03-Web3安全审计](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#03-web3%E5%AE%89%E5%85%A8%E5%AE%A1%E8%AE%A1)
    *   |[01-学习资源](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#01-%E5%AD%A6%E4%B9%A0%E8%B5%84%E6%BA%90-1)|[02-视频教程](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#02-%E8%A7%86%E9%A2%91%E6%95%99%E7%A8%8B-1)|[03-漏洞类型](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#03-%E6%BC%8F%E6%B4%9E%E7%B1%BB%E5%9E%8B)|[04-审计标准](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#04-%E5%AE%A1%E8%AE%A1%E6%A0%87%E5%87%86)|[05-审计报告](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#05-%E5%AE%A1%E8%AE%A1%E6%8A%A5%E5%91%8A)|[06-审计工具](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#06-%E5%AE%A1%E8%AE%A1%E5%B7%A5%E5%85%B7)|[07-漏洞复现](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#07-%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0)|[08-漏洞复现](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#08-%E6%BC%8F%E6%B4%9E%E8%B5%8F%E9%87%91)|[09-其他资源](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#09-%E5%85%B6%E4%BB%96%E8%B5%84%E6%BA%90-1)|
*   [0x04-Web3黑客事件](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#0x04-web3%E9%BB%91%E5%AE%A2%E4%BA%8B%E4%BB%B6)
    *   |[01-事件统计](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#01-%E4%BA%8B%E4%BB%B6%E7%BB%9F%E8%AE%A1)|[02-公开事件](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#02-%E5%85%AC%E5%BC%80%E4%BA%8B%E4%BB%B6)|[03-黑客事件](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#03-%E9%BB%91%E5%AE%A2%E4%BA%8B%E4%BB%B6)|
*   [0x05-Web3公司岗位](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#0x05-web3%E5%85%AC%E5%8F%B8%E5%B2%97%E4%BD%8D)
    *   |[01-交易平台](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#01-%E4%BA%A4%E6%98%93%E5%B9%B3%E5%8F%B0)|[02-安全公司](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#02-%E5%AE%89%E5%85%A8%E5%85%AC%E5%8F%B8)|[03-招聘岗位](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#03-%E6%8B%9B%E8%81%98%E5%B2%97%E4%BD%8D)|[04-其他平台](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#04-%E5%85%B6%E4%BB%96%E5%B9%B3%E5%8F%B0)|[05-其他信息](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#05-%E5%85%B6%E4%BB%96%E4%BF%A1%E6%81%AF)|
*   [0x06-Web3参考致谢](https://github.com/Web3Hack/Web3Hack?tab=readme-ov-file#0x06-web3%E5%8F%82%E8%80%83%E8%87%B4%E8%B0%A2)

## 0x01-Web3资源汇总

[](https://github.com/Web3Hack/Web3Hack#0x01-web3%E8%B5%84%E6%BA%90%E6%B1%87%E6%80%BB)

### 01-政策法规

[](https://github.com/Web3Hack/Web3Hack#01-%E6%94%BF%E7%AD%96%E6%B3%95%E8%A7%84)

*   中国政府禁止虚拟货币，支持区块链技术。

### 02-优秀资源

[](https://github.com/Web3Hack/Web3Hack#02-%E4%BC%98%E7%A7%80%E8%B5%84%E6%BA%90)

*    [《比特币白皮书》](https://bitcoin.org/bitcoin.pdf)@Satoshi Nakamoto
*    [《以太坊白皮书》](https://ethereum.org/zh/whitepaper/)@Vitalik Buterin
*    [《精通区块链编程》](https://item.jd.com/12620946.html)@郭理靖等译
*    [《精通以太坊》](https://item.jd.com/12522707.html)@喻勇等译
*    [《Mastering Ethereum》](https://github.com/ethereumbook/ethereumbook)@wbnns
*    [《Mastering Ethereum （中文版）》](https://github.com/inoutcode/ethereum_book)@inoutcode
*    [《数字货币投资宝典》](https://item.jd.com/10048888184688.html)@欧立奇
*    [《区块链革命》](https://item.jd.com/12033804.html)@凯尔等译
*    [《区块链技术指南》](https://yeasy.gitbook.io/blockchain_guide)@杨保华等
*    [《一本书读懂Web3.0》](https://item.jd.com/10051359398596.html)@a15a
*    [区块链常见漏洞列表](https://github.com/slowmist/Cryptocurrency-Security-Audit-Guide/blob/main/Blockchain-Common-Vulnerability-List_CN.md)@慢雾

### 03-视频教程

[](https://github.com/Web3Hack/Web3Hack#03-%E8%A7%86%E9%A2%91%E6%95%99%E7%A8%8B)

*    [https://www.bilibili.com/video/BV1ts4y1d7H7](https://www.bilibili.com/video/BV1ts4y1d7H7)
*    [https://www.bilibili.com/video/BV1Uu4y1m7WK](https://www.bilibili.com/video/BV1Uu4y1m7WK)
*    [https://www.youtube.com/watch?v=DRZogmD647U](https://www.youtube.com/watch?v=DRZogmD647U)
*    [http://course.intogateway.com](https://guardianaudits.notion.site/guardianaudits/Gateway-Free-Web3-Security-Course-574f4d819c144d7895cda6d61ba26503)
*    [《区块链技术与应用》](https://www.bilibili.com/video/av37065233/)@北大肖臻
*    [《区块链之新》](https://www.bilibili.com/bangumi/play/ep290332)@三橙传媒

### 04-论坛博客

[](https://github.com/Web3Hack/Web3Hack#04-%E8%AE%BA%E5%9D%9B%E5%8D%9A%E5%AE%A2)

*    [https://bitcointalk.org](https://bitcointalk.org/)
*    [https://www.learnblockchain.cn](https://www.learnblockchain.cn/)
*    [https://www.wtf.academy](https://www.wtf.academy/)
*    [https://ethresear.ch](https://ethresear.ch/)
*    [https://www.smartcontractresearch.org](https://www.smartcontractresearch.org/)
*    [https://ethereum-magicians.org](https://ethereum-magicians.org/)
*    [https://github.com/lbc-team](https://github.com/lbc-team)

### 05-学术论文

[](https://github.com/Web3Hack/Web3Hack#05-%E5%AD%A6%E6%9C%AF%E8%AE%BA%E6%96%87)

### 06-年度报告

[](https://github.com/Web3Hack/Web3Hack#06-%E5%B9%B4%E5%BA%A6%E6%8A%A5%E5%91%8A)

*    [慢雾出品 | 2023 区块链安全与反洗钱年度报告](https://www.slowmist.com/report/2023-Blockchain-Security-and-AML-Annual-Report\(CN\).pdf)
*    [CertiK发布《Hack3d：2023年度Web3.0安全报告》](https://mp.weixin.qq.com/s/Vu8qIcLrr4r-H7TiaZujzA)
*    [Beosin重磅年报 | 2023 Web3区块链安全态势、反洗钱分析回顾以及加密行业重点监管政策总结](https://mp.weixin.qq.com/s/GJKB0pfps2OhpxdZF1qbdA)
*    [零时科技 《2023年全球Web3行业安全研究报告》](https://mp.weixin.qq.com/s/G09px9q6yKiaqJV9p224LQ)

### 07-地址查询

[](https://github.com/Web3Hack/Web3Hack#07-%E5%9C%B0%E5%9D%80%E6%9F%A5%E8%AF%A2)

*    [https://etherscan.io](https://etherscan.io/)
*    [https://bscscan.com](https://bscscan.com/)
*    [https://www.oklink.com](https://www.oklink.com/)

### 08-协议技术

[](https://github.com/Web3Hack/Web3Hack#08-%E5%8D%8F%E8%AE%AE%E6%8A%80%E6%9C%AF)

### 09-其他资源

[](https://github.com/Web3Hack/Web3Hack#09-%E5%85%B6%E4%BB%96%E8%B5%84%E6%BA%90)

*    [《黑手册(DarkHandBook)》](https://github.com/evilcos/darkhandbook)@慢雾
*    [https://tenten.co/learning/what-is-web3](https://tenten.co/learning/what-is-web3)
*    [https://antcave.club/2323.html](https://antcave.club/2323.html)
*    [web3 学习资料（持续更新）](https://abetterweb3.notion.site/81b69eb40a09438da47dc54c2c94af12?v=0bc47a8ff9b345d298be50c181a373a1)@abetterweb3社区
*    [https://github.com/Web3-Club/Web3-Recruitment-Website](https://github.com/Web3-Club/Web3-Recruitment-Website)
*    [https://discourse.web3bole.com/](https://discourse.web3bole.com/)
*    [https://www.theblockbeats.info/news/43703](https://www.theblockbeats.info/news/43703)
*    [https://foresightnews.pro/job/detail/238](https://foresightnews.pro/job/detail/238)
*    [https://github.com/slowmist/Blockchain-dark-forest-selfguard-handbook](https://github.com/slowmist/Blockchain-dark-forest-selfguard-handbook)
*    [https://github.com/shakenetwork/blockchain-security-awesome](https://github.com/shakenetwork/blockchain-security-awesome)
*    [https://github.com/BlockchainSecBook/The-Hitchhiker-s-Guide-to-the-Blockchain-Sec](https://github.com/BlockchainSecBook/The-Hitchhiker-s-Guide-to-the-Blockchain-Sec)
*    [https://github.com/DessertHeart/Dive-Into-Blockchain](https://github.com/DessertHeart/Dive-Into-Blockchain)
*    [https://github.com/Tangent-Wei/crypto\_info](https://github.com/Tangent-Wei/crypto_info)
*    [https://github.com/Lianantech/ETH-Security](https://github.com/Lianantech/ETH-Security)
*    [https://github.com/Mithrilwoodrat/block-sec-data](https://github.com/Mithrilwoodrat/block-sec-data)
*    [https://github.com/Lianantech/Exchange-security-issues](https://github.com/Lianantech/Exchange-security-issues)
*    [https://github.com/Lianantech/Contracts-Security](https://github.com/Lianantech/Contracts-Security)
*    [https://github.com/zhengruice/BlockChainDemo](https://github.com/zhengruice/BlockChainDemo)
*    [https://mp.weixin.qq.com/template/article/1690024990/index.html](https://mp.weixin.qq.com/template/article/1690024990/index.html)
*    [https://github.com/Web3-Club/Blockchain-Developer-roadmap\_Chinese](https://github.com/Web3-Club/Blockchain-Developer-roadmap_Chinese)
*    [https://www.odaily.news/post/5177927](https://www.odaily.news/post/5177927)
*    [https://github.com/WTFAcademy/WTF-ClosedSource](https://github.com/WTFAcademy/WTF-ClosedSource)
*    [https://github.com/zzhsec/Web3.0-Security-RSS](https://github.com/zzhsec/Web3.0-Security-RSS)
*    [https://www.freebuf.com/articles/blockchain-articles](https://www.freebuf.com/articles/blockchain-articles)
*    [https://paper.seebug.org/category/blockchain/](https://paper.seebug.org/category/blockchain/)
*    [https://medium.com/immunefi/the-top-10-most-common-vulnerabilities-in-web3-bf7a921d489f](https://medium.com/immunefi/the-top-10-most-common-vulnerabilities-in-web3-bf7a921d489f)
*    [https://github.com/Taotaotao666/SGK\_Sites\_and\_Bots](https://github.com/Taotaotao666/SGK_Sites_and_Bots)
*    [https://github.com/spo0ds/Journey-to-become-a-Blockchain-Engineer](https://github.com/spo0ds/Journey-to-become-a-Blockchain-Engineer)
*    [https://github.com/0xJuancito/multichain-auditor](https://github.com/0xJuancito/multichain-auditor)
*    [https://github.com/manifoldfinance/defi-threat](https://github.com/manifoldfinance/defi-threat)
*    [https://github.com/harendra-shakya/smart-contract-attack-vectors](https://github.com/harendra-shakya/smart-contract-attack-vectors)
*    [https://github.com/Dexaran/DAPP-security-standards](https://github.com/Dexaran/DAPP-security-standards)
*    [https://proxies.yacademy.dev/](https://proxies.yacademy.dev/)
*    [https://github.com/OpenZeppelin/ethernaut](https://github.com/OpenZeppelin/ethernaut)
*    [https://wiki.learnblockchain.cn/](https://wiki.learnblockchain.cn/)
*    [https://blog-blockchain.xyz/audit/open-source-audit-tools/index.html](https://blog-blockchain.xyz/audit/open-source-audit-tools/index.html)
*    [https://blog.csdn.net/JinxMow/article/details/103400817](https://blog.csdn.net/JinxMow/article/details/103400817)
*    [https://blog-blockchain.xyz/audit/open-source-audit-tools/index.html](https://blog-blockchain.xyz/audit/open-source-audit-tools/index.html)
*    [https://xz.aliyun.com/t/4145](https://xz.aliyun.com/t/4145)
*    [https://bloodzer0.github.io/ossa/code\_audit/solitity](https://bloodzer0.github.io/ossa/code_audit/solitity)
*    [https://github.com/0xisk/awesome-solidity-security](https://github.com/0xisk/awesome-solidity-security)
*    [https://github.com/0xisk/awesome-solidity-projects](https://github.com/0xisk/awesome-solidity-projects)
*    [https://xz.aliyun.com/t/12986](https://xz.aliyun.com/t/12986)
*    [https://github.com/VenusProtocol/venus-protocol](https://github.com/VenusProtocol/venus-protocol)
*    [https://www.yun88.com/product/2599.html](https://www.yun88.com/product/2599.html)
*    [How to become a smart contract auditor](https://telegra.ph/Pel-Ada-Del-Astra-Smart-Contract-Auditor-Pathway-05-07)
*    [https://medium.com/immunefi/hacking-the-blockchain-an-ultimate-guide-4f34b33c6e8b](https://medium.com/immunefi/hacking-the-blockchain-an-ultimate-guide-4f34b33c6e8b)
*    [Working in Web3: The Handbook](https://smsunarto.notion.site/smsunarto/Working-in-Web3-The-Handbook-22d66a8608da4e9a8887a7f22170a940)
*    [https://github.com/spearbit/portfolio](https://github.com/spearbit/portfolio)
*    [https://www.w3bs3c.com](https://www.w3bs3c.com/)
*    [https://github.com/chaozh/awesome-blockchain-cn](https://github.com/chaozh/awesome-blockchain-cn)
*    [https://github.com/Eternaldeath/blockchainHome](https://github.com/Eternaldeath/blockchainHome)
*    [https://github.com/Dapp-Learning-DAO/Dapp-Learning](https://github.com/Dapp-Learning-DAO/Dapp-Learning)
*    [https://github.com/Tangent-Wei/crypto\_info](https://github.com/Tangent-Wei/crypto_info)
*    [https://github.com/lixiaoyu77/Web3.0-club](https://github.com/lixiaoyu77/Web3.0-club)
*    [https://github.com/xianfeng92/Love-Ethereum](https://github.com/xianfeng92/Love-Ethereum)
*    [https://github.com/tonycai/The-Journal-of-Blockchain](https://github.com/tonycai/The-Journal-of-Blockchain)
*    [https://github.com/Blockchain-zju/blockchainer-roadmap](https://github.com/Blockchain-zju/blockchainer-roadmap)
*    [https://gist.github.com/icexyr/888ffa177acb4256a38131d2e38b727f](https://gist.github.com/icexyr/888ffa177acb4256a38131d2e38b727f)
*    [https://github.com/fltenwall/web3-awesome](https://github.com/fltenwall/web3-awesome)
*    [https://github.com/confucianzuoyuan/blockchain-tutorial](https://github.com/confucianzuoyuan/blockchain-tutorial)
*    [https://github.com/chaseSpace/learn\_blockchain](https://github.com/chaseSpace/learn_blockchain)
*    [https://github.com/cancerts/study-blockchain-referrence](https://github.com/cancerts/study-blockchain-referrence)
*    [https://github.com/trufflesuite/truffle](https://github.com/trufflesuite/truffle)
*    [https://github.com/smartcontractkit/chainlink](https://github.com/smartcontractkit/chainlink)
*    [https://github.com/web3j/web3j](https://github.com/web3j/web3j)
*    [https://github.com/FrancescoXX/free-Web3-resources](https://github.com/FrancescoXX/free-Web3-resources)
*    [https://github.com/FISCO-BCOS/FISCO-BCOS](https://github.com/FISCO-BCOS/FISCO-BCOS)
*    [https://github.com/CryptozombiesHQ/cryptozombies-lesson-code](https://github.com/CryptozombiesHQ/cryptozombies-lesson-code)
*    [https://github.com/tintinweb/smart-contract-sanctuary](https://github.com/tintinweb/smart-contract-sanctuary)
*    [https://github.com/Synthetixio/synthetix](https://github.com/Synthetixio/synthetix)
*    [https://github.com/Consensys/surya](https://github.com/Consensys/surya)
*    [https://github.com/thirdweb-dev/contracts](https://github.com/thirdweb-dev/contracts)
*    [https://github.com/superfluid-finance/protocol-monorepo](https://github.com/superfluid-finance/protocol-monorepo)
*    [https://github.com/bekatom/awesome-ethereum](https://github.com/bekatom/awesome-ethereum)
*    [https://web3wiki.site](https://web3wiki.site/)
*    [https://github.com/gochain/web3](https://github.com/gochain/web3)
*    [https://decert.me/tutorials](https://decert.me/tutorials)
*    [https://github.com/anders94/blockchain-demo](https://github.com/anders94/blockchain-demo)
*    [https://github.com/OmniLayer/spec](https://github.com/OmniLayer/spec)
*    [https://www.ledger.com/zh-hans/academy](https://www.ledger.com/zh-hans/academy)

## 0x02-Web3智能合约

[](https://github.com/Web3Hack/Web3Hack#0x02-web3%E6%99%BA%E8%83%BD%E5%90%88%E7%BA%A6)

*   [https://github.com/LearnSolidity](https://github.com/LearnSolidity)
*   [https://github.com/topics/solidity](https://github.com/topics/solidity)

### 01-学习资源

[](https://github.com/Web3Hack/Web3Hack#01-%E5%AD%A6%E4%B9%A0%E8%B5%84%E6%BA%90)

*    Solidity语言、Move语言
*    [https://solidity-by-example.org](https://solidity-by-example.org/)
*    [《Solidity官方手册》](https://docs.soliditylang.org/zh/latest/)@soliditylang
*    [《以太坊Solidity智能合约开发》](https://item.jd.com/12824926.html)@嘉文等
*    [《精通以太坊智能合约开发》](https://item.jd.com/10075910987430.html)@熊丽兵
*    [《Solidity智能合约开发》](https://u.naturaldao.io/solidity/)@谭粤飞
*    [《Solidity 中文教程》](https://www.w3cschool.cn/solidity/)@w3cschool
*    [https://github.com/bkrem/awesome-solidity](https://github.com/bkrem/awesome-solidity)
*    [https://github.com/ethereum/solidity](https://github.com/ethereum/solidity)
*    [https://github.com/smartcontractkit/full-blockchain-solidity-course-js](https://github.com/smartcontractkit/full-blockchain-solidity-course-js)
*    [https://github.com/smartcontractkit/full-blockchain-solidity-course-py](https://github.com/smartcontractkit/full-blockchain-solidity-course-py)
*    [https://github.com/OffcierCia/DeFi-Developer-Road-Map](https://github.com/OffcierCia/DeFi-Developer-Road-Map)
*    [https://github.com/AmazingAng/WTF-Solidity](https://github.com/AmazingAng/WTF-Solidity)
*    [https://github.com/scaffold-eth/scaffold-eth](https://github.com/scaffold-eth/scaffold-eth)
*    [https://github.com/WTFAcademy/WTF-Ethers](https://github.com/WTFAcademy/WTF-Ethers)
*    [https://github.com/willitscale/learning-solidity](https://github.com/willitscale/learning-solidity)
*    [https://github.com/PaulRBerg/hardhat-template](https://github.com/PaulRBerg/hardhat-template)
*    [https://github.com/Vectorized/solady](https://github.com/Vectorized/solady)
*    [https://github.com/safe-global/safe-contracts](https://github.com/safe-global/safe-contracts)
*    [https://github.com/miguelmota/ethereum-development-with-go-book](https://github.com/miguelmota/ethereum-development-with-go-book)
*    [https://github.com/manojpramesh/solidity-cheatsheet](https://github.com/manojpramesh/solidity-cheatsheet)
*    [https://github.com/dcbuild3r/blockchain-development-guide](https://github.com/dcbuild3r/blockchain-development-guide)
*    [https://github.com/TokenMarketNet/smart-contracts](https://github.com/TokenMarketNet/smart-contracts)
*    [https://github.com/wormhole-foundation/wormhole](https://github.com/wormhole-foundation/wormhole)
*    [https://github.com/dukedaily/solidity-expert](https://github.com/dukedaily/solidity-expert)
*    [https://github.com/frankiefab100/Blockchain-Development-Resources](https://github.com/frankiefab100/Blockchain-Development-Resources)
*    [https://github.com/cyrusadkisson/solidity-baby-steps](https://github.com/cyrusadkisson/solidity-baby-steps)
*    [https://github.com/LayerZero-Labs/solidity-examples](https://github.com/LayerZero-Labs/solidity-examples)
*    [https://github.com/sc-forks/solidity-coverage](https://github.com/sc-forks/solidity-coverage)
*    [https://github.com/pubkey/eth-crypto](https://github.com/pubkey/eth-crypto)
*    [https://github.com/gakonst/solidity-book](https://github.com/gakonst/solidity-book)
*    [https://github.com/dukedaily/solidity-hardhat-kit](https://github.com/dukedaily/solidity-hardhat-kit)
*    [https://github.com/WeBankBlockchain/SmartDev-Contract](https://github.com/WeBankBlockchain/SmartDev-Contract)
*    [https://github.com/luzhenqian/web3-examples](https://github.com/luzhenqian/web3-examples)
*    [https://binschool.app/solidity-basic/solidity-basic-index.html](https://binschool.app/solidity-basic/solidity-basic-index.html)
*    [https://binschool.app/solidity-advanced/solidity-advanced-index.html](https://binschool.app/solidity-advanced/solidity-advanced-index.html)
*    [https://cryptozombies.io](https://cryptozombies.io/)

### 02-视频教程

[](https://github.com/Web3Hack/Web3Hack#02-%E8%A7%86%E9%A2%91%E6%95%99%E7%A8%8B)

*    [《Solidity 8.0全面精通》](https://space.bilibili.com/286084162/channel/collectiondetail?sid=296410)@崔棉
*    [《Solidity 高级程序设计》](https://github.com/anbang/professional-solidity)@朱安邦

### 03-知名框架

[](https://github.com/Web3Hack/Web3Hack#03-%E7%9F%A5%E5%90%8D%E6%A1%86%E6%9E%B6)

*    [https://library.dedaub.com/](https://library.dedaub.com/)
*    [https://github.com/foundry-rs/foundry](https://github.com/foundry-rs/foundry)
*    [https://github.com/NomicFoundation/hardhat](https://github.com/NomicFoundation/hardhat)

### 04-开源项目

[](https://github.com/Web3Hack/Web3Hack#04-%E5%BC%80%E6%BA%90%E9%A1%B9%E7%9B%AE)

*    [https://github.com/ConsenSys/Tokens](https://github.com/ConsenSys/Tokens)

### 05-安全开发

[](https://github.com/Web3Hack/Web3Hack#05-%E5%AE%89%E5%85%A8%E5%BC%80%E5%8F%91)

*    [https://github.com/transmissions11/solcurity](https://github.com/transmissions11/solcurity)
*    [https://github.com/Consensys/smart-contract-best-practices](https://github.com/Consensys/smart-contract-best-practices)
*    [https://github.com/OpenZeppelin/openzeppelin-contracts](https://github.com/OpenZeppelin/openzeppelin-contracts)
*    [https://github.com/fravoll/solidity-patterns](https://github.com/fravoll/solidity-patterns)

### 06-测试框架

[](https://github.com/Web3Hack/Web3Hack#06-%E6%B5%8B%E8%AF%95%E6%A1%86%E6%9E%B6)

*    [https://github.com/yosriady/contracts-starter](https://github.com/yosriady/contracts-starter)
*    [https://github.com/jTanG0506/smart-contract-engineer](https://github.com/jTanG0506/smart-contract-engineer)
*    [https://github.com/eth-brownie/brownie](https://github.com/eth-brownie/brownie)

### 07-其他资源

[](https://github.com/Web3Hack/Web3Hack#07-%E5%85%B6%E4%BB%96%E8%B5%84%E6%BA%90)

*    [https://app.intropia.io/](https://app.intropia.io/)
*    [https://www.euler.finance/](https://www.euler.finance/)
*    [https://github.com/jklepatch/eattheblocks](https://github.com/jklepatch/eattheblocks)
*    [https://github.com/adrianhajdin/project\_web3.0](https://github.com/adrianhajdin/project_web3.0)
*    [https://github.com/ethereum/remix-ide](https://github.com/ethereum/remix-ide)
*    [https://github.com/crytic/properties](https://github.com/crytic/properties)
*    [https://github.com/redacademy/vue-ethereum-ipfs](https://github.com/redacademy/vue-ethereum-ipfs)
*    [https://github.com/hyperledger/solang](https://github.com/hyperledger/solang)
*    [https://github.com/Arachnid/solidity-stringutils](https://github.com/Arachnid/solidity-stringutils)
*    [https://github.com/0xisk/awesome-solidity-gas-optimization](https://github.com/0xisk/awesome-solidity-gas-optimization)
*    [https://github.com/raineorshine/solgraph](https://github.com/raineorshine/solgraph)
*    [https://github.com/tiangong3624749/LearnMove](https://github.com/tiangong3624749/LearnMove)
*    [https://github.com/Fankouzu/smart-contract](https://github.com/Fankouzu/smart-contract)
*    [https://github.com/Web3-Club/solidity-by-example\_Chinese](https://github.com/Web3-Club/solidity-by-example_Chinese)
*    [引介｜EVM 深入探讨-Part 1](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247496252&idx=1&sn=f21662916829d32dfb36b50cec5faeff&chksm=fdde8cbbcaa905adf384a9b788ad2dea063f12029970328a3955d12012251d5fbe083454e717&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [引介｜EVM 深入探讨 Part 2](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247496538&idx=1&sn=8b79a011373c6ade9ce4d10e91dcc1a4&chksm=fdde8dddcaa904cb3fb6cb2a761b35cb5a9b18fe010d765533dbfb339bdd54c54b9cd33ecfa0&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [引介｜EVM 深入探讨 Part 3](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247496759&idx=1&sn=b2ed9ce466803dbee59b390ab9d0b1f4&chksm=fdde8ab0caa903a6e48cb7da529c6a1f8271fb39d89382f3114bccf3c11f24fbdd01150abdaf&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [引介｜EVM 深入探讨 Part 4](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247496856&idx=1&sn=cb805902a8b54d49a8f5771072385813&chksm=fdde8a1fcaa903093e7b8cf6dd6ee58b91e3fae03615a52c66feb11b5d246888b5714b78ed76&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [引介｜EVM 深入探讨 Part 5](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247497104&idx=1&sn=85f08352d0abb5730fed8f6857b4e75e&chksm=fdde8b17caa902012781c59751443160c13bd75e88f54c6ddeb5f2ae3b4d22aadc3534ba6e74&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [https://github.com/bnb-chain](https://github.com/bnb-chain)

## 03-Web3安全审计

[](https://github.com/Web3Hack/Web3Hack#03-web3%E5%AE%89%E5%85%A8%E5%AE%A1%E8%AE%A1)

### 01-学习资源

[](https://github.com/Web3Hack/Web3Hack#01-%E5%AD%A6%E4%B9%A0%E8%B5%84%E6%BA%90-1)

*   形式化验证、模糊测试、符号执行和污点分析等方法是当前主流的智能合约漏洞挖掘手段
*    [《智能合约安全审计工程师的技能集合》](https://github.com/slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor/blob/main/README_CN.md)@慢雾
*    [《智能合约安全分析和审计指南》](https://item.jd.com/10084988186661.html)@王艺卓等译
*    [《区块链安全入门与实战》](https://item.jd.com/13067698.html)@邓永凯等
*    [《区块链安全技术指南》](https://item.jd.com/39942557423.html)@黄连金等
*    [《区块链安全(面向新工科专业建设计算机系列教材)》](https://item.jd.com/10058761445223.html)@翁健
*    [《区块链安全实战》](https://item.jd.com/71361656911.html)@孙国梓等译
*    [《区块链安全技术》](https://item.jd.com/10057200109354.html)@王剑锋等
*    [Knowledge Base 慢雾安全团队知识库](https://github.com/slowmist/Knowledge-Base)
*    [区块链安全入门笔记](https://github.com/slowmist/Knowledge-Base/tree/master/blockchain_security_study_notes)@慢雾
*    [区块链安全100问](https://www.sohu.com/a/483689905_121115562)@零时科技
*    [Zone Token 智能合约审计实录](https://paper.seebug.org/1664/)@慢雾
*    [关于区块链智能合约安全漏洞类型连载分析](https://github.com/Lianantech/Security-Vulnerabilities-Analysis-Series)@链安
*    [以太坊智能合约审计CheckList](https://github.com/knownsec/Ethereum-Smart-Contracts-Security-CheckList)@知道创宇
*    [区块链公链审计Checklist](https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651372563&idx=2&sn=5496dcfd278c2d11c8cad17aee99fb23&chksm=8d39cd9bba4e448d8ced57e6dfa7df8bd905d24c71d46a3025f900f1f9e91057eeffa70abada&scene=21#wechat_redirect)@长亭
*    [以太坊智能合约审计 CheckList](https://mp.weixin.qq.com/s/O36e0gl4cs0ErQPsb5L68Q)@知道创宇
*    [EOS超级节点安全执行指南](https://github.com/slowmist/eos-bp-nodes-security-checklist)@慢雾
*    [https://github.com/slowmist/Web3-Project-Security-Practice-Requirements](https://github.com/slowmist/Web3-Project-Security-Practice-Requirements)
*    [https://github.com/slowmist/cryptocurrency-security](https://github.com/slowmist/cryptocurrency-security)
*    [https://github.com/saeidshirazi/Awesome-Smart-Contract-Security](https://github.com/saeidshirazi/Awesome-Smart-Contract-Security)
*    [https://github.com/Quillhash/QuillAudit\_Auditor\_Roadmap](https://github.com/Quillhash/QuillAudit_Auditor_Roadmap)
*    [https://github.com/Quillhash/Smart-Contract-Developer-Roadmap](https://github.com/Quillhash/Smart-Contract-Developer-Roadmap)
*    [09smart-contracts-security.asciidoc](https://github.com/ethereumbook/ethereumbook/blob/develop/09smart-contracts-security.asciidoc)
*    [https://github.com/hzysvilla/Academic\_Smart\_Contract\_Papers](https://github.com/hzysvilla/Academic_Smart_Contract_Papers)
*    [https://github.com/HalbornSecurity/CTFs](https://github.com/HalbornSecurity/CTFs)
*    [https://github.com/crytic/awesome-ethereum-security](https://github.com/crytic/awesome-ethereum-security)
*    [https://github.com/0xsomnus/Solidity-DevSecOps-Standard](https://github.com/0xsomnus/Solidity-DevSecOps-Standard)
*    [https://github.com/sigp/solidity-security-blog](https://github.com/sigp/solidity-security-blog)
*    [https://hacken.io/discover/dapp-security-guide/](https://hacken.io/discover/dapp-security-guide/)
*    [intro-security-hacking-smart-contracts-ethereum](https://www.notonlyowner.com/learn/intro-security-hacking-smart-contracts-ethereum)
*    [https://github.com/0xsanny/solsec](https://github.com/0xsanny/solsec)
*    [https://cmichel.io/how-to-become-a-smart-contract-auditor](https://cmichel.io/how-to-become-a-smart-contract-auditor)
*    [《智能合约安全分析和审计指南》](https://github.com/Web3Hack/Web3Hack/blob/main)@王艺卓等
*    [https://github.com/x676f64/secureum-mind\_map](https://github.com/x676f64/secureum-mind_map)
*    [https://chinadefi.com/2293.html](https://chinadefi.com/2293.html)
*    [https://chirpset.com/t/topic/448](https://chirpset.com/t/topic/448)
*    [https://github.com/Cyfrin/security-and-auditing-full-course-s23](https://github.com/Cyfrin/security-and-auditing-full-course-s23)
*    [https://github.com/shanzson/Smart-Contract-Auditor-Tools-and-Techniques](https://github.com/shanzson/Smart-Contract-Auditor-Tools-and-Techniques)
*    [https://updraft.cyfrin.io/courses/security](https://updraft.cyfrin.io/courses/security)

### 02-视频教程

[](https://github.com/Web3Hack/Web3Hack#02-%E8%A7%86%E9%A2%91%E6%95%99%E7%A8%8B-1)

*    [Advanced Web3 Security Course | Part 1](https://www.youtube.com/watch?v=DRZogmD647U)@Owen Thurm
*    [Smart Contract Security and Auditing 101](https://www.youtube.com/watch?v=0aJfCug1zTM&t=3s)@Chainlink
*    [《区块链安全实战修炼营》](https://learnblockchain.cn/course/38)@BlockSec

### 03-漏洞类型

[](https://github.com/Web3Hack/Web3Hack#03-%E6%BC%8F%E6%B4%9E%E7%B1%BB%E5%9E%8B)

*   底层代码安全、加密算法安全、网络协议安全、共识协议安全、密码协议安全、智能合约安全、链上链下协同安全、跨链安全、基础Web2安全。
*    [https://github.com/Quillhash/Solidity-Attack-Vectors](https://github.com/Quillhash/Solidity-Attack-Vectors)
*    [https://github.com/kadenzipfel/smart-contract-vulnerabilities](https://github.com/kadenzipfel/smart-contract-vulnerabilities)
*    [https://github.com/sirhashalot/SCV-List](https://github.com/sirhashalot/SCV-List)
*    [https://github.com/xf97/JiuZhou](https://github.com/xf97/JiuZhou)
*    [https://swcregistry.io/](https://swcregistry.io/)
*    [https://github.com/uni-due-syssec/eth-reentrancy-attack-patterns](https://github.com/uni-due-syssec/eth-reentrancy-attack-patterns)
*    [https://github.com/securing/SCSVS](https://github.com/securing/SCSVS)
*    [https://github.com/felix0888/fallback-attack](https://github.com/felix0888/fallback-attack)
*    [https://blog.openzeppelin.com/follow-this-quality-checklist-before-an-audit-8cc6a0e44845/](https://blog.openzeppelin.com/follow-this-quality-checklist-before-an-audit-8cc6a0e44845/)
*    [https://consensys.github.io/smart-contract-best-practices/](https://consensys.github.io/smart-contract-best-practices/)
*    [https://github.com/Rari-Capital/solcurity](https://github.com/Rari-Capital/solcurity)
*    [https://github.com/cryptofinlabs/audit-checklist](https://github.com/cryptofinlabs/audit-checklist)
*    [https://securing.github.io/SCSVS](https://securing.github.io/SCSVS)
*    [https://github.com/nascentxyz/simple-security-toolkit](https://github.com/nascentxyz/simple-security-toolkit)
*    [https://bowtiedisland.com/how-to-read-a-smart-contract-audit-report](https://bowtiedisland.com/how-to-read-a-smart-contract-audit-report)
*    [https://our.status.im/what-is-a-security-audit-when-you-should-get-one-and-how-to-prepare](https://our.status.im/what-is-a-security-audit-when-you-should-get-one-and-how-to-prepare)
*    [security-review-checklist-for-a-smart-contract/8593#8593](https://ethereum.stackexchange.com/questions/8551/security-review-checklist-for-a-smart-contract/8593#8593)
*    [https://github.com/pcaversaccio/reentrancy-attacks](https://github.com/pcaversaccio/reentrancy-attacks)
*    [Solidity 安全：已知攻击方法和常见防御模式综合列表](https://github.com/slowmist/Knowledge-Base/blob/master/translations/solidity-security-comprehensive-list-of-known-attack-vectors-and-common-anti-patterns_zh-cn.md)@慢雾
*    [https://blog.sigmaprime.io/solidity-security.html](https://blog.sigmaprime.io/solidity-security.html)
*    [智能合约安全审计入门篇 —— 重入漏洞](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247494325&idx=1&sn=39b32e10219ca6209e3fd11cb0134bc9&chksm=fdde9432caa91d24bdb064217249f6c1a7696b1869748f7eef3697403d4cbd00f0b44a22d85b&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [智能合约安全审计入门篇 —— 溢出漏洞](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247494336&idx=1&sn=0bda7ddd7d7c70a8d616af28916635ab&chksm=fdde9447caa91d513706a541019ab1bd9f04bb56e72c4b1efcc343c59afc98e75a03e47cfa01&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [智能合约安全审计入门篇 —— 自毁函数](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247494482&idx=1&sn=923f75b52f494f27cf4f54683c760d2d&chksm=fdde95d5caa91cc3fb051dbd7d214ab220a77d8416c6ddbe02e73bb5e84a7505a1b2f176b0d2&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [智能合约安全审计入门篇 —— 拒绝服务](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247496478&idx=1&sn=ab7c5bad8b74375896e69d2ff2ad7df8&chksm=fdde8d99caa9048fcd005310402937745d166b6bef116ef19095dae4c5d1510392c2f93d763d&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [智能合约安全审计入门篇 —— 随机数](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247495857&idx=1&sn=aef0425ae6cedca45c2328b3d6f34a9c&chksm=fdde8e36caa907208af70d99e78393272ca5f8b43591f0abfecaf1b40ac1578854b928bbc57d&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [智能合约安全审计入门篇 —— delegatecall (1)](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247495630&idx=1&sn=f7ccb4e1a30d5b78679a8335053a9d32&chksm=fdde9149caa9185f32baa92132a841030c68fe622e1f21365255e8c3b3d5d23783b6d0e2cef0&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [智能合约安全审计入门篇 —— delegatecall (2)](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247495813&idx=1&sn=6cd4c3c8c1f1e2c0743d357decd6517b&chksm=fdde8e02caa9071429aaed9431be58f5fb90a902754384512d5ade77a24a84121386f2680b81&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [智能合约安全审计入门篇 —— 访问私有数据](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247495163&idx=1&sn=ea372916d1d957de4ba19676bd030526&chksm=fdde937ccaa91a6a3f686166a8eac9f742edebd4ba30b7ba26fe93f0ceff2219e6ffa47292b3&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [智能合约安全审计入门篇 —— 签名重放](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247498135&idx=1&sn=247b149eb5b0b1c5b4348ce7512adf03&chksm=fdde8710caa90e06922e46f142a57fd8d6de5718e84547e6c548c45e301172f14dcebf73f00f&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [智能合约安全审计入门篇 —— Contract Size Check](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247498432&idx=1&sn=3238076ebd6e1f8e35f577c51f2cec88&chksm=fdde8447caa90d514fe716549885a7285d3c587da66f255f35896b3c02a800adefb67d3e6404&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [智能合约安全审计入门篇 —— 移花接木](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247496825&idx=1&sn=a6154c7c7aaa2502839f51c85f4efc34&chksm=fdde8afecaa903e8875c586cf1f49e7bef350ee4cb490306fe5ad6b59cf13e61a2d7622d3935&scene=178&cur_album_id=1378673890158936067#rd)@慢雾
*    [智能合约安全审计入门篇 —— Phishing with tx.origin](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247496742&idx=1&sn=ce5f542b5bd108483592250598b0daff&chksm=fdde8aa1caa903b73640f8464542eed5d6b809a4815cb11332de1872a8b00c96e4327b3d1c63&scene=178&cur_album_id=1378673890158936067#rd)@慢雾

### 04-审计标准

[](https://github.com/Web3Hack/Web3Hack#04-%E5%AE%A1%E8%AE%A1%E6%A0%87%E5%87%86)

*    [https://swcregistry.io](https://swcregistry.io/)
*    [https://dasp.co](https://dasp.co/)
*    [https://github.com/fairyproof-io/Solidity-Vulnerability-Library](https://github.com/fairyproof-io/Solidity-Vulnerability-Library)
*    [https://github.com/immunefi-team/Web3-Security-Library](https://github.com/immunefi-team/Web3-Security-Library)
*    [https://github.com/cryptofinlabs/audit-checklist](https://github.com/cryptofinlabs/audit-checklist)
*    [https://ethereum.org/en/developers/tutorials/secure-development-workflow](https://ethereum.org/en/developers/tutorials/secure-development-workflow)
*    [https://securing.github.io/SCSVS/](https://securing.github.io/SCSVS/)
*    [https://immunefi.com/immunefi-vulnerability-severity-classification-system-v2-3/](https://immunefi.com/immunefi-vulnerability-severity-classification-system-v2-3/)
*    [https://github.com/SunWeb3Sec/DeFiVulnLabs](https://github.com/SunWeb3Sec/DeFiVulnLabs)
*    [https://consensys.github.io/smart-contract-best-practices/attacks](https://consensys.github.io/smart-contract-best-practices/attacks)
*    [https://github.com/tamjid0x01/SmartContracts-audit-checklist](https://github.com/tamjid0x01/SmartContracts-audit-checklist)
*    [https://github.com/aviggiano/theauditorbook](https://github.com/aviggiano/theauditorbook)
*    [https://github.com/Cyfrin/audit-checklist](https://github.com/Cyfrin/audit-checklist)
*    [https://github.com/sayan011/Immunefi-bug-bounty-writeups-list](https://github.com/sayan011/Immunefi-bug-bounty-writeups-list)
*    [https://mp.weixin.qq.com/s/IFmLs-XtK8WVrgaDwGZM4g](https://mp.weixin.qq.com/s/IFmLs-XtK8WVrgaDwGZM4g)

### 05-审计报告

[](https://github.com/Web3Hack/Web3Hack#05-%E5%AE%A1%E8%AE%A1%E6%8A%A5%E5%91%8A)

*    smart contracts report、smart contract pdf、智能合约安全审计
*    Smart Contracts、Blockchain、DApps
*    [https://solodit.xyz](https://solodit.xyz/)
*    [Runtime Verification Audit Reports](https://github.com/runtimeverification/publications)
*    [AuditBlock Audit Reports](https://github.com/AuditBlock/AuditBlock_Reports_V1.0)
*    [Beosin Audit Reports](https://www.beosin.com/)
*    [https://github.com/peckshield/publications](https://github.com/peckshield/publications)
*    [https://github.com/TechRate/Smart-Contract-Audits](https://github.com/TechRate/Smart-Contract-Audits)
*    [https://github.com/Quillhash/QuillAudit\_Reports](https://github.com/Quillhash/QuillAudit_Reports)
*    [https://github.com/coinscope-co/audits](https://github.com/coinscope-co/audits)
*    [https://github.com/Tech-Audit/Smart-Contract-Audits](https://github.com/Tech-Audit/Smart-Contract-Audits)
*    [https://github.com/SpyWolfNetwork/Smart\_Contract\_Audits](https://github.com/SpyWolfNetwork/Smart_Contract_Audits)
*    [https://github.com/Hexens/Smart-Contract-Review-Public-Reports](https://github.com/Hexens/Smart-Contract-Review-Public-Reports)
*    [https://github.com/0xKitsune/solstat-reports](https://github.com/0xKitsune/solstat-reports)
*    [https://github.com/zaryab2000/Smart-Contracts\_Audit\_Reports](https://github.com/zaryab2000/Smart-Contracts_Audit_Reports)
*    [https://github.com/CrackenTechAudit/Reports](https://github.com/CrackenTechAudit/Reports)
*    [https://github.com/HashEx/public\_audits](https://github.com/HashEx/public_audits)
*    [https://github.com/zokyo-sec/audit-reports](https://github.com/zokyo-sec/audit-reports)
*    [https://github.com/MotechAudit/Audit-Certificate](https://github.com/MotechAudit/Audit-Certificate)
*    [https://github.com/MotechAudit/Smart-Contract-Audits](https://github.com/MotechAudit/Smart-Contract-Audits)
*    [https://github.com/KRYPTAUDIT/Smart-Contracts-Audits](https://github.com/KRYPTAUDIT/Smart-Contracts-Audits)
*    [https://github.com/Defimoonorg/Audit-Report](https://github.com/Defimoonorg/Audit-Report)
*    [https://github.com/cyberscope-io/audits](https://github.com/cyberscope-io/audits)
*    [https://github.com/0xGuard-com/audit-reports](https://github.com/0xGuard-com/audit-reports)
*    [https://github.com/ContractWolf/smart-contract-audits](https://github.com/ContractWolf/smart-contract-audits)
*    [https://github.com/solidproof/smart-contract-audits](https://github.com/solidproof/smart-contract-audits)
*    [https://github.com/Rugfreecoins/Smart-Contract-Audits](https://github.com/Rugfreecoins/Smart-Contract-Audits)
*    [https://github.com/solidified-platform/audits](https://github.com/solidified-platform/audits)
*    [https://github.com/blocksecteam/audit-reports](https://github.com/blocksecteam/audit-reports)
*    [https://github.com/Coinsult/solidity](https://github.com/Coinsult/solidity)
*    [https://github.com/blocksafu111/audit](https://github.com/blocksafu111/audit)
*    [https://github.com/1inch/1inch-audits](https://github.com/1inch/1inch-audits)
*    [https://code4rena.com/reports/](https://code4rena.com/reports/)
*    [https://github.com/verichains/public-audit-reports](https://github.com/verichains/public-audit-reports)
*    [https://github.com/movebit/Sampled-Audit-Reports](https://github.com/movebit/Sampled-Audit-Reports)
*    [https://github.com/ImmuneBytes/Smart-Contract-Audit-Reports](https://github.com/ImmuneBytes/Smart-Contract-Audit-Reports)
*    [https://github.com/oak-security/audit-reports](https://github.com/oak-security/audit-reports)
*    [https://blog.chain.link/how-to-audit-smart-contract-zh/](https://blog.chain.link/how-to-audit-smart-contract-zh/)
*    [https://trustchain.medium.com/full-smart-contract-audit-methodology-2023-b29db744bf3e](https://trustchain.medium.com/full-smart-contract-audit-methodology-2023-b29db744bf3e)
*    [https://paper.seebug.org/1664/](https://paper.seebug.org/1664/)
*    [https://academy.binance.com/zh/articles/what-is-a-smart-contract-security-audit](https://academy.binance.com/zh/articles/what-is-a-smart-contract-security-audit)
*    [https://www.cnblogs.com/Soy-technology/p/16774835.html](https://www.cnblogs.com/Soy-technology/p/16774835.html)
*    [https://cloud.tencent.com/developer/article/2152878](https://cloud.tencent.com/developer/article/2152878)
*    [https://www.blockglobe24.com/news02/27394.html](https://www.blockglobe24.com/news02/27394.html)
*    [https://lorexxar.cn/2018/12/01/contract-checklist/](https://lorexxar.cn/2018/12/01/contract-checklist/)
*    [https://www.bnbchain.org/en/blog/certik-integration-guide-on-binance-smart-chain](https://www.bnbchain.org/en/blog/certik-integration-guide-on-binance-smart-chain)
*    [https://docs.hatom.com/getting-started/security/security-reports](https://docs.hatom.com/getting-started/security/security-reports)
*    [https://docs.babyswap.finance/audits](https://docs.babyswap.finance/audits)
*    [https://de.fi/audit-database](https://de.fi/audit-database)
*    [https://blog.openzeppelin.com/tag/security-audits](https://blog.openzeppelin.com/tag/security-audits)
*    [https://consensys.io/diligence/audits/](https://consensys.io/diligence/audits/)
*    [https://github.com/sigp/public-audits](https://github.com/sigp/public-audits)
*    [https://github.com/sherlock-protocol/sherlock-reports](https://github.com/sherlock-protocol/sherlock-reports)
*    [https://github.com/DVPNET/Report\_Public](https://github.com/DVPNET/Report_Public)

### 06-审计工具

[](https://github.com/Web3Hack/Web3Hack#06-%E5%AE%A1%E8%AE%A1%E5%B7%A5%E5%85%B7)

*    [https://github.com/search?q=Solidity+analyzer](https://github.com/search?q=Solidity+analyzer)
*    [https://github.com/crytic/slither](https://github.com/crytic/slither)
*    [https://github.com/Consensys/mythril](https://github.com/Consensys/mythril)
*    [https://github.com/LoRexxar/Kunlun-M](https://github.com/LoRexxar/Kunlun-M)
*    [https://github.com/duaraghav8/Ethlint](https://github.com/duaraghav8/Ethlint)
*    [https://github.com/crytic/echidna](https://github.com/crytic/echidna)
*    [https://github.com/smartdec/smartcheck](https://github.com/smartdec/smartcheck)
*    [https://github.com/fuzzland/ityfuzz](https://github.com/fuzzland/ityfuzz)
*    [https://github.com/protofire/solhint](https://github.com/protofire/solhint)
*    [https://fuzz.land/](https://fuzz.land/)
*    [https://github.com/trailofbits/eth-security-toolbox](https://github.com/trailofbits/eth-security-toolbox)
*    [https://github.com/tandil-dev/forsage-audit](https://github.com/tandil-dev/forsage-audit)
*    [https://github.com/zkoranges/zkPoEX](https://github.com/zkoranges/zkPoEX)
*    [https://github.com/EOS-Nation/light-kyc-identity-report](https://github.com/EOS-Nation/light-kyc-identity-report)
*    [https://github.com/ericnordelo/nile-coverage](https://github.com/ericnordelo/nile-coverage)
*    [https://github.com/siddhantsharma301/traverse](https://github.com/siddhantsharma301/traverse)
*    [https://github.com/byterocket/auditSign](https://github.com/byterocket/auditSign)
*    [https://github.com/kb0304/zimedar-nagrik](https://github.com/kb0304/zimedar-nagrik)
*    [https://github.com/mmsaki/dog-registry-blockchain-app](https://github.com/mmsaki/dog-registry-blockchain-app)
*    [https://github.com/FuzzingLabs/octopus](https://github.com/FuzzingLabs/octopus)
*    [https://github.com/0xsha/ChainWalker](https://github.com/0xsha/ChainWalker)
*    [https://github.com/nascentxyz/pyrometer](https://github.com/nascentxyz/pyrometer)
*    [https://github.com/Jon-Becker/heimdall-rs](https://github.com/Jon-Becker/heimdall-rs)
*    [https://lightrains.com/blogs/solidity-static-analysis-tools](https://lightrains.com/blogs/solidity-static-analysis-tools)
*    [https://manticore.readthedocs.io](https://manticore.readthedocs.io/)
*    [https://github.com/Quillhash/Web3-Security-Tools](https://github.com/Quillhash/Web3-Security-Tools)
*    [https://github.com/trailofbits/manticore](https://github.com/trailofbits/manticore)
*    [https://github.com/eth-sri/securify2](https://github.com/eth-sri/securify2)
*    [https://github.com/Cyfrin/aderyn](https://github.com/Cyfrin/aderyn)
*    [https://github.com/MiloTruck/regast](https://github.com/MiloTruck/regast)
*    [https://github.com/malik672/gas-analyzer](https://github.com/malik672/gas-analyzer)
*    [https://github.com/giovannarevitoroz/regast](https://github.com/giovannarevitoroz/regast)
*    [https://github.com/sagap/sonar-solidity](https://github.com/sagap/sonar-solidity)
*    [https://github.com/0xKitsune/solstat](https://github.com/0xKitsune/solstat)
*    [https://github.com/0xKitsune/sstan](https://github.com/0xKitsune/sstan)
*    [https://github.com/byterocket/c4udit](https://github.com/byterocket/c4udit)
*    [https://github.com/cryptohft/solidity-analyzer](https://github.com/cryptohft/solidity-analyzer)
*    [https://github.com/cryptohft/solidity-analyzer-1](https://github.com/cryptohft/solidity-analyzer-1)
*    [https://github.com/muellerberndt/sabre](https://github.com/muellerberndt/sabre)
*    [https://github.com/NomicFoundation/solidity-analyzer](https://github.com/NomicFoundation/solidity-analyzer)
*    [https://github.com/sec-bit/vscode-secbit-ssae](https://github.com/sec-bit/vscode-secbit-ssae)
*    [https://github.com/parmanuxyz/solidity-analyzer](https://github.com/parmanuxyz/solidity-analyzer)
*    [https://github.com/karlpothast/SolidityCode.Reviews](https://github.com/karlpothast/SolidityCode.Reviews)
*    [https://github.com/etsangsplk/contract-complexity](https://github.com/etsangsplk/contract-complexity)
*    [https://github.com/LightDestory/SolidityDesignPatternAnalyzer](https://github.com/LightDestory/SolidityDesignPatternAnalyzer)
*    [https://github.com/WaizKhan7/SmartMuv](https://github.com/WaizKhan7/SmartMuv)
*    [https://github.com/haosong/solidity-checker](https://github.com/haosong/solidity-checker)
*    [https://github.com/ymerkli/smart-contract-taint-analysis](https://github.com/ymerkli/smart-contract-taint-analysis)
*    [https://github.com/DTeam-Top/hardhat-remix-analyzer](https://github.com/DTeam-Top/hardhat-remix-analyzer)
*    [https://github.com/Arendt/solidity-gas-analyzer](https://github.com/Arendt/solidity-gas-analyzer)
*    [https://github.com/malik672/gas-analyzer](https://github.com/malik672/gas-analyzer)
*    [https://github.com/web3xDev/SolidityAnalyzer](https://github.com/web3xDev/SolidityAnalyzer)
*    [https://github.com/adamidarrha/solidityStaticAnalyzer](https://github.com/adamidarrha/solidityStaticAnalyzer)
*    [https://github.com/loorola/SolidityStaticAnalyzer](https://github.com/loorola/SolidityStaticAnalyzer)
*    [https://github.com/olog2n/SolidityStaticAnalyzers](https://github.com/olog2n/SolidityStaticAnalyzers)
*    [https://github.com/smhaaker/solanalyzer](https://github.com/smhaaker/solanalyzer)
*    [https://github.com/gaoxingjian/slither\_cv](https://github.com/gaoxingjian/slither_cv)
*    [https://github.com/Tynik/ethereum-smart-contracts-analyzer](https://github.com/Tynik/ethereum-smart-contracts-analyzer)
*    [https://github.com/wenjinge0424/solidity-analyzer](https://github.com/wenjinge0424/solidity-analyzer)
*    [https://github.com/Mr-Chegini/solidity-analyzer](https://github.com/Mr-Chegini/solidity-analyzer)
*    [https://github.com/wenjinge0424/solidity-analyzer](https://github.com/wenjinge0424/solidity-analyzer)
*    [https://github.com/Mr-Chegini/solidity-analyzer](https://github.com/Mr-Chegini/solidity-analyzer)
*    [https://github.com/vmontagh/solidity-analyzer](https://github.com/vmontagh/solidity-analyzer)
*    [https://github.com/AmroAbdrabo/ethereum-sc-taint-analyzer](https://github.com/AmroAbdrabo/ethereum-sc-taint-analyzer)
*    [https://github.com/alcuadrado/solidity-precompilation-analyzer](https://github.com/alcuadrado/solidity-precompilation-analyzer)
*    [https://github.com/EricR/solanalyzer](https://github.com/EricR/solanalyzer)
*    [https://github.com/giovannarevitoroz/regast](https://github.com/giovannarevitoroz/regast)
*    [https://github.com/CarlosAlegreUr/Forge-Snapshots-Analyzer](https://github.com/CarlosAlegreUr/Forge-Snapshots-Analyzer)
*    [https://github.com/hugoqnc/Taint-Analysis-PASS](https://github.com/hugoqnc/Taint-Analysis-PASS)
*    [https://github.com/etexaco123/AI\_code\_analyzer](https://github.com/etexaco123/AI_code_analyzer)
*    [https://github.com/echohermion/customization\_pattern\_checker](https://github.com/echohermion/customization_pattern_checker)
*    [https://github.com/shaikat010/Slither\_Smart\_Contract\_Testing](https://github.com/shaikat010/Slither_Smart_Contract_Testing)
*    [https://github.com/crytic/slither/wiki/Printer-documentation](https://github.com/crytic/slither/wiki/Printer-documentation)
*    [https://github.com/microsoft/verisol](https://github.com/microsoft/verisol)
*    [https://github.com/a16z/halmos](https://github.com/a16z/halmos)
*    [https://github.com/christoftorres/Osiris](https://github.com/christoftorres/Osiris)
*    [https://github.com/nescio007/teether](https://github.com/nescio007/teether)
*    [https://github.com/uni-due-syssec/eth-reentrancy-attack-patterns](https://github.com/uni-due-syssec/eth-reentrancy-attack-patterns)
*    [https://github.com/gongbell/ContractFuzzer](https://github.com/gongbell/ContractFuzzer)
*    [https://github.com/eth-sri/ilf](https://github.com/eth-sri/ilf)
*    [https://github.com/usyd-blockchain/vandal](https://github.com/usyd-blockchain/vandal)
*    [https://github.com/nevillegrech/MadMax](https://github.com/nevillegrech/MadMax)
*    [https://github.com/costa-group/ethIR](https://github.com/costa-group/ethIR)
*    [https://github.com/smartdec/smartcheck](https://github.com/smartdec/smartcheck)
*    [https://github.com/wesleyjtann/Safe-SmartContracts](https://github.com/wesleyjtann/Safe-SmartContracts)
*    [https://github.com/Messi-Q/ReChecker](https://github.com/Messi-Q/ReChecker)
*    [https://github.com/runtimeverification/evm-semantics](https://github.com/runtimeverification/evm-semantics)
*    [https://github.com/pirapira/eth-isabelle](https://github.com/pirapira/eth-isabelle)
*    [https://github.com/Decurity/semgrep-smart-contracts](https://github.com/Decurity/semgrep-smart-contracts)
*    [https://github.com/enzymefinance/oyente](https://github.com/enzymefinance/oyente)
*    [https://github.com/msuiche/porosity](https://github.com/msuiche/porosity)
*    [https://github.com/crytic/ethersplay](https://github.com/crytic/ethersplay)
*    [https://github.com/Arachnid/evmdis](https://github.com/Arachnid/evmdis)
*    Analysis-of-Ethereum-Transactions-and-Smart-Contracts-main

### 07-漏洞复现

[](https://github.com/Web3Hack/Web3Hack#07-%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0)

*    [https://github.com/blockthreat/blocksec-ctfs](https://github.com/blockthreat/blocksec-ctfs)
*    [https://github.com/Ershu1/-Sec](https://github.com/Ershu1/-Sec)
*    [https://ethernaut.zeppelin.solutions](https://ethernaut.zeppelin.solutions/)
*    [https://github.com/crytic/not-so-smart-contracts](https://github.com/crytic/not-so-smart-contracts)
*    [https://github.com/OpenZeppelin/ethernaut](https://github.com/OpenZeppelin/ethernaut)
*    [https://blog.sigmaprime.io/solidity-security.html](https://blog.sigmaprime.io/solidity-security.html)
*    [https://0x0.ai](https://0x0.ai/)
*    [https://mythx.io](https://mythx.io/)

### 08-漏洞赏金

[](https://github.com/Web3Hack/Web3Hack#08-%E6%BC%8F%E6%B4%9E%E8%B5%8F%E9%87%91)

*    [https://bugrap.io](https://bugrap.io/)
*    [https://code4rena.com](https://code4rena.com/)
*    [https://immunefi.com](https://immunefi.com/)
*    [https://hackenproof.com](https://hackenproof.com/)
*    [https://dvpnet.io](https://dvpnet.io/)
*    [https://github.com/0xJuancito/audits](https://github.com/0xJuancito/audits)

### 09-其他资源

[](https://github.com/Web3Hack/Web3Hack#09-%E5%85%B6%E4%BB%96%E8%B5%84%E6%BA%90-1)

*    [https://mp.weixin.qq.com/s/Q8PtmUUAOo7XIV3BY5ycXA](https://mp.weixin.qq.com/s/Q8PtmUUAOo7XIV3BY5ycXA)
*    [https://github.com/emilianobonassi/security-toolkit](https://github.com/emilianobonassi/security-toolkit)
*    [https://blog.chain.link/defi-security-best-practices/](https://blog.chain.link/defi-security-best-practices/)
*    [https://github.com/secureum/DeFi-Security-Summit-Stanford](https://github.com/secureum/DeFi-Security-Summit-Stanford)
*    [https://github.com/OriginProtocol/security](https://github.com/OriginProtocol/security)
*    [https://start.me/p/QRg5ad/officercia](https://start.me/p/QRg5ad/officercia)
*    [https://github.com/BronnyWang/Blockchain-CheckList](https://github.com/BronnyWang/Blockchain-CheckList)
*    [https://github.com/Al1ex/BlockChainSec](https://github.com/Al1ex/BlockChainSec)
*    [https://github.com/Aloneposix/Awesome-Blockchain-Security](https://github.com/Aloneposix/Awesome-Blockchain-Security)
*    [https://github.com/euphrat1ca/Security-List/blob/master/wiki\_Web3Tech.md](https://github.com/euphrat1ca/Security-List/blob/master/wiki_Web3Tech.md)
*    [https://github.com/Lianantech/EOS-Security](https://github.com/Lianantech/EOS-Security)
*    [https://github.com/SunWeb3Sec/DeFiHackLabs](https://github.com/SunWeb3Sec/DeFiHackLabs)
*    [https://ethereum.org/en/developers/docs/smart-contracts/security](https://ethereum.org/en/developers/docs/smart-contracts/security)
*    [https://consensys.io/blog/ethereum-smart-contract-security-recommendations](https://consensys.io/blog/ethereum-smart-contract-security-recommendations)
*    [https://www.immunebytes.com/blog/getting-started-with-smart-contract-fuzzing](https://www.immunebytes.com/blog/getting-started-with-smart-contract-fuzzing)
*    [https://www.apriorit.com/dev-blog/578-blockchain-attack-vectors](https://www.apriorit.com/dev-blog/578-blockchain-attack-vectors)
*    [https://blog.finxter.com/randomness-or-replicatedlogic-attack-on-smart-contracts](https://blog.finxter.com/randomness-or-replicatedlogic-attack-on-smart-contracts)
*    [如何成为一名智能合约审计安全研究员，学习路线和必备网站](https://mp.weixin.qq.com/s/p15ts8zK78rJpPot8iSLnQ)
*    [https://audit-hero.com/search-findings](https://audit-hero.com/search-findings)
*    [https://solidityscan.com](https://solidityscan.com/)
*    [https://github.com/0xcacti/awesome-solidity-dev-tools](https://github.com/0xcacti/awesome-solidity-dev-tools)
*    [慢雾出品｜Web3 行业供应链安全指南](https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247498025&idx=1&sn=1642e5f07a7b1c2c85c4f3da897d8b2f&chksm=fdde87aecaa90eb84f67a35dbc139174e5d1b9ef8ec0663920ac6d3a8415175b038ec684f745&scene=178&cur_album_id=1378673890158936067#rd)@慢雾

## 0x04-Web3黑客事件

[](https://github.com/Web3Hack/Web3Hack#0x04-web3%E9%BB%91%E5%AE%A2%E4%BA%8B%E4%BB%B6)

*   [https://github.com/Web3Hack/Events](https://github.com/Web3Hack/Events)

### 01-事件统计

[](https://github.com/Web3Hack/Web3Hack#01-%E4%BA%8B%E4%BB%B6%E7%BB%9F%E8%AE%A1)

*   [https://hacked.slowmist.io/zh/](https://hacked.slowmist.io/zh/)

### 02-公开事件

[](https://github.com/Web3Hack/Web3Hack#02-%E5%85%AC%E5%BC%80%E4%BA%8B%E4%BB%B6)

*   [Wormhole-uninitialized-proxy](https://medium.com/immunefi/wormhole-uninitialized-proxy-bugfix-review-90250c41a43a) 1000万美元

### 03-黑客事件

[](https://github.com/Web3Hack/Web3Hack#03-%E9%BB%91%E5%AE%A2%E4%BA%8B%E4%BB%B6)

*   [https://rekt.news/zh/](https://rekt.news/zh/)
*   [https://mp.weixin.qq.com/s/Kk2lsoQ1679Gda56Ec-zJg](https://mp.weixin.qq.com/s/Kk2lsoQ1679Gda56Ec-zJg)
*   [https://blog.chain.link/reentrancy-attacks-and-the-dao-hack-zh](https://blog.chain.link/reentrancy-attacks-and-the-dao-hack-zh)

## 0x05-Web3公司招聘

[](https://github.com/Web3Hack/Web3Hack#0x05-web3%E5%85%AC%E5%8F%B8%E6%8B%9B%E8%81%98)

### 01-交易平台

[](https://github.com/Web3Hack/Web3Hack#01-%E4%BA%A4%E6%98%93%E5%B9%B3%E5%8F%B0)

*   [https://skynet.certik.com/zh-CN/leaderboards/exchange](https://skynet.certik.com/zh-CN/leaderboards/exchange)
*   [https://www.binance.com](https://www.binance.com/)
*   [https://www.htx.com](https://www.htx.com/)
*   [https://www.okx.com](https://www.okx.com/)
*   [https://www.bitget.com](https://www.bitget.com/)
*   [https://www.gate.io](https://www.gate.io/)

### 02-安全公司

[](https://github.com/Web3Hack/Web3Hack#02-%E5%AE%89%E5%85%A8%E5%85%AC%E5%8F%B8)

*    Certik：[https://www.certik.com](https://www.certik.com/)
*    Beosin：[https://www.beosin.com](https://www.beosin.com/)
*    慢雾科技：[https://slowmist.io](https://slowmist.io/)
*    零时科技：[https://www.noneage.com](https://www.noneage.com/)
*    成都链安：[https://www.lianantech.com](https://www.lianantech.com/)
*    北京链安：[https://safeis.cn](https://safeis.cn/)
*    知道创宇：[https://www.knownsec.com](https://www.knownsec.com/)
*    长亭科技：[https://www.chaitin.cn/zh/blockchain](https://www.chaitin.cn/zh/blockchain)
*    安全狗：[https://www.safedog.cn/index/blockChainIndex.html](https://www.safedog.cn/index/blockChainIndex.html)
*    [https://vatin.io](https://vatin.io/)
*    [https://hexens.io](https://hexens.io/)
*    [http://armorslab.com](http://armorslab.com/)
*    [https://www.numencyber.com](https://www.numencyber.com/)
*    [https://arda.run](https://arda.run/)
*    [https://github.com/runtimeverification](https://github.com/runtimeverification)
*    [https://credshields.com](https://credshields.com/)
*    [https://www.immunebytes.com](https://www.immunebytes.com/)
*    [https://techrate.org](https://techrate.org/)
*    [https://spywolf.co](https://spywolf.co/)
*    [https://www.zokyo.io](https://www.zokyo.io/)
*    [https://tokyotechie.com](https://tokyotechie.com/)
*    [https://code4rena.com](https://code4rena.com/)
*    [https://chainsecurity.com](https://chainsecurity.com/)
*    [https://desufi.com](https://desufi.com/)
*    [https://www.fairyproof.com](https://www.fairyproof.com/)
*    [https://de.fi/](https://de.fi/)
*    [https://github.com/HashEx](https://github.com/HashEx)
*    [https://github.com/sigp](https://github.com/sigp)
*    [https://www.movebit.xyz](https://www.movebit.xyz/)
*    [https://etherscan.io/directory/Smart\_Contracts/Smart\_Contracts\_Audit\_And\_Security](https://etherscan.io/directory/Smart_Contracts/Smart_Contracts_Audit_And_Security)

### 03-招聘岗位

[](https://github.com/Web3Hack/Web3Hack#03-%E6%8B%9B%E8%81%98%E5%B2%97%E4%BD%8D)

*    [https://www.lagou.com/wn/jobs/11504460.html](https://www.lagou.com/wn/jobs/11504460.html)
*    [https://www.lagou.com/wn/jobs/11418567.html](https://www.lagou.com/wn/jobs/11418567.html)
*    [https://web3.career/](https://web3.career/)
*    [https://remote3.co/](https://remote3.co/)
*    [https://www.bolejobs.co](https://www.bolejobs.co/)
*    [https://abetterweb3.notion.site/](https://abetterweb3.notion.site/)
*    [https://cryptojobslist.com/](https://cryptojobslist.com/)
*    [https://cryptocurrencyjobs.co/](https://cryptocurrencyjobs.co/)
*    [https://wellfound.com/jobs](https://wellfound.com/jobs)
*    [https://pompcryptojobs.com/](https://pompcryptojobs.com/)
*    [https://www.useweb3.xyz/jobs](https://www.useweb3.xyz/jobs)
*    [https://www.defi.jobs/](https://www.defi.jobs/)
*    [https://careers.fenbushicapital.vc/jobs](https://careers.fenbushicapital.vc/jobs)
*    [https://crypto.jobs/](https://crypto.jobs/)
*    [http://commonapp.proofofwork.news/#](http://commonapp.proofofwork.news/#)
*    [https://froog.co/](https://froog.co/)
*    [https://jobs.workable.com/](https://jobs.workable.com/)
*    [https://docs.qq.com/sheet/DTERFV0FUalBia2N6?tab=BB08J2](https://docs.qq.com/sheet/DTERFV0FUalBia2N6?tab=BB08J2)
*    [https://foresightnews.pro/job](https://foresightnews.pro/job)
*    [https://www.jobprotocol.xyz/](https://www.jobprotocol.xyz/)
*    [https://stablegram.com/](https://stablegram.com/)
*    [Web3 Job Database](https://docs.google.com/spreadsheets/d/1jxymnRoNf05quL4QCr69702AEAC1QQroX-_gl9iNz_A/edit?pli=1#gid=870926729)
*    [https://github.com/JiceJin/who-is-hiring](https://github.com/JiceJin/who-is-hiring)
*    [https://parax.ai/](https://parax.ai/)
*    [https://techflowpost.substack.com/p/web3](https://techflowpost.substack.com/p/web3)
*    [https://zhuanlan.zhihu.com/p/525119897](https://zhuanlan.zhihu.com/p/525119897)
*    [https://github.com/rebase-network/who-is-hiring](https://github.com/rebase-network/who-is-hiring)

### 04-其他平台

[](https://github.com/Web3Hack/Web3Hack#04-%E5%85%B6%E4%BB%96%E5%B9%B3%E5%8F%B0)

*    [https://www.maskex.com/](https://www.maskex.com/)

### 05-其他信息

[](https://github.com/Web3Hack/Web3Hack#05-%E5%85%B6%E4%BB%96%E4%BF%A1%E6%81%AF)

*    [Working-in-Web3-The-Handbook](https://smsunarto.notion.site/smsunarto/Working-in-Web3-The-Handbook-22d66a8608da4e9a8887a7f22170a940)

## 0x06-Web3参考致谢

[](https://github.com/Web3Hack/Web3Hack#0x06-web3%E5%8F%82%E8%80%83%E8%87%B4%E8%B0%A2)

*    [https://github.com/xiaolai](https://github.com/xiaolai)
*    [https://twitter.com/sunyuchentron](https://twitter.com/sunyuchentron)
*    [https://twitter.com/justinsuntron](https://twitter.com/justinsuntron)
*    [https://github.com/TechRate](https://github.com/TechRate)
*    [https://github.com/Quillhash](https://github.com/Quillhash)
*    [https://github.com/Consensys](https://github.com/Consensys)
*    [https://github.com/coinscope-co](https://github.com/coinscope-co)
*    [https://github.com/Tech-Audit](https://github.com/Tech-Audit)
*    [https://github.com/SpyWolfNetwork](https://github.com/SpyWolfNetwork)
*    [https://github.com/AuditBlock](https://github.com/AuditBlock)
*    [https://github.com/Hexens](https://github.com/Hexens)
*    [https://github.com/peckshield](https://github.com/peckshield)
*    [https://github.com/chainflag](https://github.com/chainflag)
*    [https://github.com/yosriady](https://github.com/yosriady)
*    [https://github.com/red4sec](https://github.com/red4sec)
*    [https://github.com/0xJuancito](https://github.com/0xJuancito)
*    [https://github.com/NoneAge](https://github.com/NoneAge)
*    [https://github.com/OffcierCia](https://github.com/OffcierCia)
*    [https://github.com/pcaversaccio](https://github.com/pcaversaccio)
*    [https://github.com/code-423n4](https://github.com/code-423n4)
*    [https://github.com/PatrickAlphaC](https://github.com/PatrickAlphaC)

Web3区块链安全合集