Web3 / Smart Contract Security

Solidity audits, Foundry exploits, the bug classes that drain protocols

A focused track on auditing and exploiting smart contracts on EVM-compatible blockchains. Targets a security analyst transitioning from web/AppSec into Web3. Read Solidity + EVM bytecode, identify the canonical bug classes (reentrancy, integer overflow, access control, oracle manipulation, signature replay, MEV), run an audit with Slither/Mythril/manual review, build PoC exploits with Foundry against forked mainnet, triage live incidents.

Lessons

• EVM and Solidity Fundamentals
• Tooling: Foundry, Hardhat, Anvil
• Reentrancy and State-Machine Bugs
• Access Control and Storage Layout
• Oracle Manipulation and Price Attacks
• Signature Replay, EIP-712, and Front-Running
• Auditing Methodology with Slither and Mythril
• Capstone: Audit a 500-line Vault