We use necessary cookies for site function. For analytics and marketing, we need your consent. You can change your mind anytime. Privacy Policy
12 weeks
4.9
11 modules
1. The Auditor's Mindset and Methodology
Learn how professional auditors approach a codebase: threat modeling first, then systematic review — not random bug hunting.
2 quiz questions
2. Reentrancy: The Classic Killer
Dissect the DAO hack pattern: single-function, cross-function, cross-contract, and read-only reentrancy.
3 quiz questions
3. Access Control Failures
Missing modifiers, unprotected initializers, tx.origin misuse, and the privilege-escalation bugs that hand over the keys.
2 quiz questions
4. Oracle and Price Manipulation
Spot exploitable price reads: spot DEX prices, donation/inflation attacks, and flash-loan-funded manipulation.
2 quiz questions
5. Flash Loan Attack Patterns
Study how flash loans fund exploits: governance capture, oracle skew, collateral tricks — and how to design against them.
2 quiz questions
6. Integer, Precision, and Accounting Bugs
Division ordering, decimal mismatches, rounding direction, and the accounting errors that silently leak value.
2 quiz questions
7. DoS, Griefing, and Edge-Case Failures
Unbounded loops, block stuffing, external call failures, and the denial-of-service patterns that brick protocols.
2 quiz questions
8. Signatures, Replay, and Frontrunning
EIP-712 signatures, nonces and replay protection, missing deadlines, and commit-reveal schemes.
2 quiz questions
9. Upgradeable Contract and Proxy Risks
Storage collisions, uninitialized implementations, function clashes, and admin key risk in proxy systems.
2 quiz questions
10. Automated Analysis: Slither, Fuzzing, and Invariants
Run the auditor's toolchain: static analysis with Slither, property fuzzing with Echidna/Foundry, and coverage-guided testing.
2 quiz questions
11. Audit Process, Reports, and Capstone
Structure findings into a professional report, run a live capstone audit, and learn the business of security review.
2 quiz questions