We look at the Flashbots Protect product and test to see if we get MEV’d or if Flashbots protects us from the watchful eyes of hungry mempool sandwich bots. — I read the Flashbots documentation, which seems to tell me two conflicting things.

What is Chainlink CCIP (cross-chain interoperability protocol)? How is it an improvement over current smart contract bridges? What are the risks of working with cross-chain? — If you look at the DeFi hack leaderboard, you’ll see a staggering nearly $2.5 billion stolen from cross-chain applications.

Smart contract audits are getting easier. — Get your profile set up now. Be ready to fly with Codehawks when the first contest starts. 🦅 Kaw! Kaw! In today’s Decentralised Finance (DeFi) world, security has increasingly become a concern for developers and users alike. According to ChainAnalysis, in 2022, out of the ~$44 billion circulating in DFI…

You can learn everything you need about solidity, smart contract development, and becoming a blockchain developer with Patrick Collins’ latest course. — For the past three years, every year, I’ve made an end-to-end data dump, passion project, web3 education course of what I think the minimum knowledge a blockchain engineer needs to have to be. And we did it again this year, using the Foundry framework, and we are just getting started.

Learn to become a blockchain developer with these 10 (14) blockchain developer learning courses. — Learning to become a Smart Contract and Blockchain Developer can seem daunting, but it doesn’t have to be! Set aside some time each week, and get cracking on any of the tutorials and content below. Don’t be afraid to ask a ton of questions, and don’t feel imposter syndrome! …

We look at formal verification & symbolic execution with two Trail of Bits Web3 security team members. Additionally, we review the value these techniques bring and compare them to other tools. — A huge thank you to Trail of Bits Troy & Josselin for taking the time on this interview. Additionally, special thanks to Hari, Runtime Verification, Leo Alt, and Palina for their help in understanding these concepts and work in the field.

What is fuzz testing? What are invariant tests? We introduce how to use these tools in Web3 & Solidity and explain why they are essential, especially for security. Every project should have stateful fuzz tests moving forward, and auditors can use understanding invariants to find critical bugs before code is deployed. — Shout-out to Trail of Bits and Horsefacts for all the fuzzing content. Introduction

A smart contract audit is a time-boxed security-based code review on your smart contract/web3 system. An auditor’s goal is to find as many vulnerabilities as possible and educate the client on ways to improve the security of their codebase moving forward. — What is a Smart Contract Audit? A smart contract audit is a time-boxed security-based code review on your smart contract/web3 system. An auditor’s goal is to find as many vulnerabilities as possible and educate the client on ways to improve the security of their codebase moving forward.

We look across the industry at the top smart contract auditors in Web3. Smart contract audits are the lifeblood of the Web3 security space and are crucial to ensuring we stay safe. — I am a co-founder and security researcher from Cyfrin, where we do smart contract audits. This is my opinionated take on top smart contract audit firms along with Cyfrin. The only way Web3 scales is if we increase our security, so I want to ensure that other top firms get…