Security Research

Sections

• Foundry 0 to 100
• Practice
• Deeper Readings

Common Questions

• Transfer vs Send vs Call
• Understanding Calldata
  • EVM byte storage in Solidity

Timeline

• Solidity Quirks
• Day 4: I’m getting familiar with all of the tools. With my current knowledge, I’ll only be able to spot very specific bugs. I need to broaden my knowledge and read more code. I’m also realizing math will be an important skill in this field.
  • Finding interesting contracts to analyze takes time. Some kind of parser would be nice.
    • Reading through “internal transactions” is a good start.
    • GitHub has also been an ok source.
• Fuzzing has been helpful and fun.
• Ether.js is not my first choice, but it’s popular. Damn Vulnerable DeFi taught me a lot about Ethers.js.
• Day 14: Seems like everyone working in the space is pretty anonymous…
  • By now, I’ve written a basic parser to find interesting contracts.
  • I’ve gone through Ethernaut and Damn Vulnerable DeFi. Really helped me in learning Solidity and Yul. Lots of clever solution writeups to discover.
  • EVM is no longer a mystery, it’s just a really cool machine.