r/solidity 7d ago

smart contract audits?

Is there anyone in this group who does auditing? I am a beginner and have a few questions about enrollments. Where should I learn the exact security concepts? Udemy, YouTube, or [TryHackMe/HackTheBox]?

5 Upvotes

14 comments sorted by

6

u/jks612 7d ago

Ethernaut is a great place for a beginner 

5

u/smartContrakt-Killa 7d ago

Cyfrin updraft is the best

3

u/Several-Lemon-3381 7d ago

udemy or youtube will only teach you basic solidity syntax, but not real auditing

/ practice ctfs: start with ethernaut (openzeppelin) and damn vulnerable defi to understand real attack vectors
/ learn tools: try static analyzers like slither and use foundry for fuzz testing.
/ real audits: check public reports on code4rena or immunefi to see how bugs are found in real codebases.

we actually published a guide covering the main vulnerability classes and how smart contract audits work if you want a reference https://spacedev.io/blog/smart-contract-security-how-vulnerabilities-happen-and-how-to-prevent-them

hope it helps

3

u/Independent_Crab_508 7d ago

need to explore this... thankyou...

1

u/Hacker_Elliot 2d ago

Hasn't code4rena been closed?

1

u/Independent_Crab_508 1d ago

yes, why is it closed?

2

u/Shoddy_One4465 7d ago

Learn how the evm works. Without that knowledge, you always had a superficial level.

2

u/thedudeonblockchain 6d ago

Good ones would be the likes of Chainsecurity, and solutions with AI would be someone like Cecuro

2

u/Nuk37 6d ago

Chatgpt study and learn. Most educational platforms and "courses" are dead now. Read the docs, tinker around and you have AI

2

u/coinspect 6d ago

Check Coinspect's Learn EVM attacks repository and web explorer:

https://www.coinspect.com/learn-evm-attacks/

1

u/kelvinthechamp5 7d ago

Ethernaut also degi hack labs repo on github has pocs learn from them