gmh5225/awesome-web3-securityA curated list of Web3 Security materials and resources for Pentesters and Bug Hunters.
# `awesome-web3-security`[](https://awesome.re) [](https://github.com/gmh5225/awesome-web3-security/blob/main/LICENSE) A curated list of Web3 Security materials and resources for Pentesters and Bug Hunters. ``` If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. ``` > Show respect to all the projects below, perfect works of art :saluting_face: ## How to contribute? - https://github.com/HyunCafe/contribute-practice - https://docs.github.com/en/get-started/quickstart/contributing-to-projects ## Skills for AI Agents This repository provides skills that can be used with AI agents and coding assistants such as [Cursor](https://www.cursor.com/), [OpenClaw](https://docs.openclaw.ai/), [Claude Code](https://docs.anthropic.com/en/docs/claude-code), [Codex CLI](https://github.com/openai/codex), and other compatible tools. Install skills to get specialized knowledge about Web3 security topics. **[View on learn-skills.dev](https://learn-skills.dev/skills/gmh5225/awesome-web3-security)** **Installation:** ```bash npx skills add https://github.com/gmh5225/awesome-web3-security --skill <skill-name> ``` **Available Skills:** | Skill | Description | |-------|-------------| | `mev-security` | MEV concepts, common attacks, and mitigations | | `awesome-web3-security-overview` | Understanding and contributing to this resource list | | `smart-contract-security` | EVM/Solidity smart contract security | | `solana-security` | Solana/Sealevel security research | | `web3-security-tooling` | Security tooling (analyzers, fuzzers, decompilers) | | `wallet-security` | Wallet security (MPC/TSS, key management, phishing) | **Example:** ```bash # Install smart contract security skill npx skills add https://github.com/gmh5225/awesome-web3-security --skill smart-contract-security # Install multiple skills npx skills add https://github.com/gmh5225/awesome-web3-security --skill solana-security --skill wallet-security ``` ## Security Starter Pack - **CTFs / Practice** - https://capturetheether.com/ [Capture the Ether] - https://ethernaut.openzeppelin.com/ [The Ethernaut] - https://www.damnvulnerabledefi.xyz/ [Damn Vulnerable DeFi] - https://blockchain-ctf.securityinnovation.com/#/ [Security Innovation Blockchain CTF] - https://github.com/nccgroup/GOATCasino [GOAT Casino] - https://github.com/paradigm-operations/paradigm-ctf-2021 [Paradigm CTF] - https://github.com/blockthreat/blocksec-ctfs [Blocksec CTFs] - https://ciphershastra.com/ [ciphershastra CTF] - https://github.com/SunWeb3Sec/DeFiVulnLabs [DeFiVulnLabs] - https://quillctf.super.site/ [QuillCTF] - https://www.vulnmachines.com/ [Vulnmachines] - https://www.web3pwn.com/ [Web3Pwn] - **Testnets / Faucets** - https://sepolia.dev/ [Sepolia Resources] - https://faucet.circle.com/ [Circle Faucet (Sepolia USDC)] - **Mindmaps** - https://www.xmind.net/m/2zbPP7/ [Common Vulnerabilities MindMap] - https://coggle.it/diagram/YqLzaiSABzXD4UnZ/t/smart-contract-auditor [Auditor MindMap] - https://xmind.works/share/zfdeD07U [Tools MindMap] - **Starter Tools** - https://github.com/Quillhash/Web3-Security-Tools [Web3-Security-Tools] - https://remix-project.org/ [Remix] - **Blogs / Postmortems** - https://medium.com/immunefi [Immunefi] - https://blog.openzeppelin.com/security-audits/ [OpenZeppelin] - https://quillaudits.medium.com/ [QuillAudits] - https://blog.solidityscan.com/ [SolidityScan] - https://medium.com/@Beosin_com [Beosin] - https://neptunemutual.medium.com/ [Neptune Mutual] - https://blocksecteam.medium.com/ [BlockSec] - https://www.certik.com/resources/blog [CertiK] - https://mouse-run.beehiiv.com [mouse-run] - **Bug Bounties** - https://immunefi.com/ [Immunefi] - https://hackenproof.com/programs [HackenProof] - https://code4rena.com/ [Code4rena] - https://gitcoin.co/explorer [Gitcoin] - https://hackerone.com [HackerOne] - https://spearbit.com/ [Spearbit] - https://app.sherlock.xyz/ [Sherlock] - https://audits.sherlock.xyz/contests [Sherlock Contests] - https://saloon.finance/ [The Saloon] - https://hats.finance/ [Hats Finance] - https://secure3.io/ [Secure3] - https://app.secure3.io/ [Secure3 Contests] - https://securr.tech/ [Securr] - https://r.xyz/ [Remedy] - https://hunt.r.xyz/ [Remedy Hunt] - https://www.vigilseek.com/bug-bounty [Vigilseek (Bug Bounty Aggregator)] - https://cantina.xyz/ [Cantina] - **Newsletters / Collections** - https://newsletter.blockthreat.io/ [BlockThreat] - https://rekt.news/ [REKT] - https://weekinethereumnews.com/ [Week in Ethereum News] - https://quillaudits.substack.com/ [HashingBits] - https://web3sec.news [Web3sec.news] - **Talks / Videos** - https://www.youtube.com/watch?v=lJQwuyW4t-k [IWCON-S22] - http://www.youtube.com/watch?v=P8LXLoTUJ5g [LiveOverflow] - https://www.youtube.com/watch?v=zcJmWr5_GOc [Web3 Security Mindset] - https://www.youtube.com/watch?v=QSmtVR0aniI [Security and Vulnerabilities in Web3] - https://www.youtube.com/playlist?list=PLox242_JhiuEe64LzW1M8XpiQ2-N5bZsX [Playlist] - https://www.youtube.com/watch?v=A5s9aez43Co&list=PLO5VPQH6OWdXKPThrch6U0imGdD3pHLXi [Damn Vulnerable DeFi CTF] - https://www.youtube.com/watch?v=cOP9z9XWjwc [Attacking Authorization] - https://www.youtube.com/watch?v=TmZ8gH-toX0 [Audit a Smart Contract] - https://www.youtube.com/watch?v=gyMwXuJrbJQ [32-Hour Course] - **Learn Solidity** - https://cryptozombies.io/ [CryptoZombies] - https://www.learnweb3.io/ [LearnWeb3] - https://www.smartcontract.engineer/ [Smart Contract Engineer] - https://solidity-by-example.org/ [Solidity by Example] - https://www.web3.university/ [Web3 University] - https://www.useweb3.xyz/ [useWeb3] - **Audit Reports** - https://github.com/chainsulting/Smart-Contract-Security-Audits [Chainsulting] - https://code4rena.com/reports [Code4rena Reports] - https://consensys.net/diligence/audits/ [Consensys] - https://github.com/Quillhash/QuillAudit_Reports [QuillAudits] - https://github.com/spearbit/portfolio/tree/master/pdfs [Spearbit] - https://github.com/sherlock-protocol/sherlock-reports [Sherlock] - https://github.com/0xNazgul/Blockchain-Security-Audit-List [Audit List] - https://github.com/shieldify-security/audits-portfolio [Shieldify] - **Certifications** - https://secops.group/certified-blockchain-practitioner [CBP] - https://blockchaintrainingalliance.com/products/cbsp [CBSP] ## Blockchain Guide - https://github.com/useWeb3/awesome-web3 [awesome web3] - https://github.com/austintgriffith/ethskills [The missing knowledge between AI agents and production Ethereum] - https://github.com/karask/satoshi-paper [Original Satoshi paper in various formats] - https://l2beat.com/scaling/summary [L2BEAT Scaling Summary] - https://github.com/unbalancedparentheses/practical_cryptography_and_distributed_ledgers [Practical Cryptography and Distributed Ledgers] - https://github.com/mush-support/mush-news [MushNews - Web3 News Explorer] - https://github.com/lukasmasuch/best-of-crypto [awesome open-source crypto projects] - https://github.com/0xMacro/awesome-solana-security [awesome solana security] - https://github.com/az0mb13/awesome-solana-security [awesome solana security] - https://github.com/openSVM/awesome-svm [All things SVM (Solana Virtual Machine)] - https://github.com/Ackee-Blockchain/Solana-Auditors-Bootcamp [Solana audit security] - https://github.com/anza-xyz/security-audits [Solana audit security] - https://github.com/0xNazgul/Blockchain-Security-Library [Blockchain Security Library] - https://github.com/GammaStrategies/awesome-uniswap-v3 [A curated list of awesome Uniswap v3 resources] - https://github.com/fewwwww/awesome-uniswap-hooks [A curated list of awesome Uniswap v4 hooks resources] - https://github.com/neodyme-labs/solana-ctf [Solana CTF] - https://github.com/slowmist/Web3-Project-Security-Practice-Requirements [Web3 Project Security Practice Requirements] - https://www.freeweb3resources.com [Guide] - https://github.com/yjjnls/awesome-blockchain [Guide] - https://github.com/ahmet/awesome-web3 [Guide] - https://github.com/codeluu/blockchain-osint [A collection of tools and resources useful for OSINT investigations in the cryptocurrency] - https://github.com/K2SOsint/Legendary_Crypto [A resource full of Crypto/OSINT tools, techniques and training courses for CTI, AML, and forensic investigations] - https://github.com/xaynov-osint/txfetch [Blockchain transaction retrieval for OSINT and crypto forensics — search by timestamp, amount, and memo across networks without TX hash] - https://github.com/gmh5225/wallet-pentesting-article [Wallet Pentesting Guide] - https://github.com/ValkyriSecurity/awesome-wallet-security [Resources to learn Wallet Security] - https://github.com/rkdud007/awesome-zkvm [zkVM Guide] - https://github.com/dineshpinto/awesome-tee-blockchain [Curated resources for Trusted Execution Environments (TEEs) in blockchain] - https://github.com/eth-act/zkevm-book [Ethereum zkEVM book] - https://github.com/chaozh/awesome-blockchain-cn [CN Guide] - https://blog.wssh.trade/posts/uniswap-v3 [Uniswap V3 CN Guide] - https://github.com/bekatom/awesome-ethereum [ETH Guide] - https://github.com/InfectedIsm/solana-quick-start-guide [Solana quick start guide] - https://github.com/GuiBibeau/solana-dev-skill [solana skill] - https://github.com/solana-foundation/awesome-solana-ai [AI tooling to help build on Solana — skills, agents, MCP, dev tools] - https://ashborn-sol.vercel.app/demo/shadow-agent [Shadow Agent Protocol — private AI commerce on Solana with Ashborn/Light ZK, x402 micropayments] - https://github.com/ipsilon/eof [evm object format] - https://github.com/Lilyjjo/mev_reading_list [List of resources to understand what 'mev' is] - https://en.hackndo.com/ethereum-virtual-machine [EVM] - https://github.com/mektigboy/evm-chad [EVM] - https://github.com/jtriley-eth/the-ethereum-virtual-machine [EVM] - https://github.com/w1nt3r-eth/evm-from-scratch [EVM] - https://github.com/shafu0x/evm-from-scratch-book [EVM] - https://github.com/wjmelements/evm [EVM (C)] - https://github.com/4337Mafia/awesome-account-abstraction [EIP-4337] - https://github.com/Arvolear/awesome-eip-7702-delegations [awesome EIP-7702] - https://github.com/smlxl/evm.codes [EVM Opcodes Interactive Reference] - https://github.com/Unboxed-Software/solana-course [A complete course for learning Solana] - https://www.rareskills.io/solana-tutorial [A Solana Course By Rareskills] - https://github.com/lambdaclass/lambdaworks [Crypto] - https://github.com/coinspect/learn-evm-attacks [EVM Security] - https://github.com/x676f64/secureum-mind_map [EVM Security] - https://github.com/perimetersec/evm-fuzzing-resources [EVM Fuzzing Resources] - https://github.com/SunWeb3Sec/damn-vulnerable-defi-v4-solutions [Defi Security] - https://github.com/slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor [Smart contract audit skills roadmap for beginners] - https://github.com/Dapp-Learning-DAO/Dapp-Learning [Dapp] - https://github.com/contractcops/auditingroadmap [Solidity] - https://github.com/0xcacti/awesome-solidity-dev-tools [Solidity] - https://github.com/0xArDANT/Solidity-Exercises [Solidity Exercises] - https://github.com/chinmay-farkya/solidity-notes [Solidity Notes] - https://github.com/33357/smartcontract-apps [Solidity CN] - https://github.com/nullity00/web3-resources [Web3 resources] - https://github.com/Malinariy/Solidity-gas-optimizations-tips [Gas optimizations tips] - https://github.com/w3f/Grants-Program [Web3 Foundation Grants Program] - https://github.com/Bonfida/solana-name-service-guide [Solana name service] - https://github.com/smartcontractkit/starter-kits [across the smart contract ecosystem] - https://github.com/smartcontractkit/solana-starter-kit [Example code for using Chainlink on Solana] - https://www.solanaecosystem.com [Solana Ecosystem discoverer] - https://github.com/solana-developers/create-solana-dapp [CLI for creating Solana dApps on the fly] - https://github.com/ithacaxyz/odyssey-examples [Odyssey's features] - https://github.com/OpenZeppelin/merkle-tree [Merkle Tree] - https://github.com/cbergoon/merkletree [A Merkle Tree implementation written in Go] - [Smart Contract Precision Handling Best Practices](https://github.com/gmh5225/Smart-Contract-Precision-Handling-Best-Practices) [Precision Handling] - https://github.com/gmh5225/Layer2-Architecture [Layer2 Architecture] - https://github.com/gmh5225/Optimism-VM-Architecture [Optimism VM Architecture] - https://github.com/gmh5225/zkVM-Architecture [zkVM Architecture] - https://github.com/awesomelistsio/awesome-crypto-wallets [Awesome Web3 Crypto Wallet] - https://github.com/dinhduongha/awesome-wallet [Awesome Web3 Crypto Wallet] - https://github.com/gmh5225/awesome-crypto-wallet-address [Awesome crypto wallet address] - https://github.com/Ackee-Blockchain/awesome-wake-tests [Awesome Wake tests] ## Public Chains ### Ethereum (Execution) - https://github.com/paradigmxyz/reth [Rust Ethereum execution client] - https://github.com/erigontech/erigon [Efficient Ethereum execution client] - https://github.com/NethermindEth/nethermind [.NET Ethereum execution client] - https://github.com/hyperledger/besu [Java Ethereum execution client] ### Ethereum (Consensus) - https://github.com/sigp/lighthouse [Rust Ethereum consensus client] - https://github.com/prysmaticlabs/prysm [Go Ethereum consensus client] - https://github.com/Consensys/teku [Java Ethereum consensus client] - https://github.com/grandinetech/grandine [Rust Ethereum consensus client] ### Solana - https://github.com/anza-xyz/agave [Agave Solana validator client] ### Bitcoin - https://github.com/bitcoin/bitcoin [Bitcoin Core reference implementation] - https://github.com/libbitcoin/libbitcoin-server [Bitcoin full node and query server] - https://github.com/libbitcoin/libbitcoin-node [Bitcoin full node] ### Other L1 - https://github.com/bnb-chain/bsc [BNB Smart Chain node] - https://github.com/ava-labs/avalanchego [Avalanche node] - https://github.com/maticnetwork/bor [Polygon PoS Bor client] - https://github.com/cosmos/gaia [Cosmos Hub node] - https://github.com/paritytech/polkadot-sdk [Polkadot SDK and node] - https://github.com/aptos-labs/aptos-core [Aptos node] - https://github.com/MystenLabs/sui [Sui node] - https://github.com/near/nearcore [NEAR Protocol node] - https://github.com/ton-blockchain/ton [TON node] - https://github.com/tronprotocol/java-tron [TRON node] - https://github.com/IntersectMBO/cardano-node [Cardano node] - https://github.com/sei-protocol/sei-chain [Sei node] - https://github.com/celestiaorg/celestia-node [Celestia DA node] - https://github.com/category-labs/monad-bft [Monad consensus client] - https://github.com/category-labs/monad [Monad execution client] - https://github.com/hyperliquid-dex/node [Hyperliquid L1 node] - https://github.com/berachain/beacon-kit [Berachain BeaconKit consensus client] - https://github.com/0xsoniclabs/sonic [Sonic node] - https://github.com/ProvableHQ/snarkOS [Aleo node (snarkOS)] - https://github.com/MinaProtocol/mina [Mina Protocol node] - https://github.com/cosmos/cosmos-sdk [Cosmos SDK for app-chains] - https://github.com/XRPLF/rippled [XRP Ledger (rippled)] - https://github.com/stellar/stellar-core [Stellar Core node] - https://github.com/algorand/go-algorand [Algorand node] - https://github.com/filecoin-project/lotus [Filecoin Lotus node] - https://github.com/dfinity/ic [Internet Computer (DFINITY) node] - https://github.com/hashgraph/hedera-services [Hedera node] - https://github.com/kaspanet/rusty-kaspa [Kaspa node (Rust)] - https://github.com/monero-project/monero [Monero node] - https://github.com/zcash/zcash [Zcash node] - https://github.com/litecoin-project/litecoin [Litecoin Core] - https://github.com/dogecoin/dogecoin [Dogecoin Core] ### Layer 2 / Rollups - https://github.com/ethereum-optimism/optimism [OP Stack / Optimism monorepo] - https://github.com/base/node [Base node (OP Stack L2)] - https://github.com/OffchainLabs/nitro [Arbitrum Nitro node] - https://github.com/matter-labs/zksync-era [zkSync Era node] - https://github.com/0xPolygonHermez/zkevm-node [Polygon zkEVM node] - https://github.com/eqlabs/pathfinder [Starknet full node (Rust)] - https://github.com/Consensys/linea-monorepo [Linea zkEVM stack and node] - https://github.com/scroll-tech/rollup-node [Scroll rollup node (Reth-based)] ## AI ### Agents - https://github.com/microsoft/ai-agents-for-beginners [AI Agents for beginners] - https://github.com/openai/openai-agents-js [openai agent workflows and agents] - https://github.com/openai/openai-agents-python [openai agent workflows and agents] - https://github.com/e2b-dev/awesome-ai-agents [A list of AI autonomous agents] - https://github.com/elizaOS/eliza [Autonomous agents for everyone] - https://github.com/elizaOS/eliza-starter [eliza starter] - https://github.com/kyegomez/swarms [The Enterprise-Grade Production-Ready Multi-Agent Orchestration Framework] - https://github.com/blorm-network/ZerePy [ZerePy an open-source launch-pad for AI agents] - https://github.com/lambdaclass/eth-agent [AI agent wallet for EVM chains: send/swap/bridge stablecoins with spending limits and human approval] - https://github.com/kortix-ai/suna [Suna - Open Source Generalist AI Agent] - https://github.com/HKUDS/AutoAgent [AutoAgent: Fully-Automated and Zero-Code LLM Agent Framework] - https://github.com/agno-agi/agno [Agno is a lightweight, high-performance library for building Agents] - https://github.com/crewAIInc/crewAI [autonomous AI agents] - https://github.com/pydantic/pydantic-ai [Agent Framework / shim to use Pydantic with LLMs] - https://github.com/VoltAgent/voltagent [Open Source TypeScript AI Agent Framework] - https://github.com/sendaifun/solana-agent-kit [connect any ai agents to solana protocols] - https://github.com/goat-sdk/goat [Connect AI agents to 200+ onchain tools — Solana, EVM, multi-chain] - https://github.com/tetsuo-ai/AgenC [Privacy-focused multi-agent coordination with ZK and confidential compute for Solana] - https://github.com/anagrambuild/breeze-agent-kit [AI agents for Solana yield farming via Breeze — MCP, x402 API, SKILL.md] - https://github.com/cascade-protocol/sati [SATI — ERC-8004 compliant agent identity and reputation on Solana, proof-of-participation] - https://github.com/coinbase/agentkit [Every AI Agent deserves a wallet] - https://github.com/0xgasless/agentkit [AgentKit is a toolkit that gives AI agents access to crypto wallets and onchain functionality] - https://github.com/Ido-Levi/Hephaestus [Semi-Structured Agentic Framework. Workflows build themselves as agents discover what needs to be done, not what you predicted upfront] ### Skills - https://github.com/pashov/ai-web3-security [Curated AI smart-contract security tools hub — OSS skills/agents and paid platforms for EVM, Solana, Move/Sui; by pashov.com] - https://github.com/coinbase/agentic-wallet-skills [Wallet skills for AI agents — npx skills add coinbase/agentic-wallet-skills] - https://github.com/Uniswap/uniswap-ai [AI tools for building on Uniswap — skills, plugins, and agents for any coding agent] - https://github.com/jup-ag/agent-skills [Skills for AI coding agents to integrate with the Jupiter ecosystem] - https://github.com/OpenZeppelin/openzeppelin-skills [OpenZeppelin Skills — secure smart contract development with OZ libraries; Solidity, Cairo, Stylus, Stellar; setup/upgrade skills; npx skills add OpenZeppelin/openzeppelin-skills] - https://github.com/bnb-chain/bnbchain-skills [BNB Chain Skills — AI agent skills for BNB Chain MCP: blocks, transactions, contracts, tokens, NFTs, wallet, ERC-8004 agents, Greenfield; npx skills add bnb-chain/bnbchain-skills] - https://github.com/gate/gate-skills [Gate Skills — open skills marketplace for AI agents: Gate exchange/DEX (spot, futures, unified, dual, staking), market analysis, risk check, news, address tracking; one-click MCP install for Cursor/Claude/Codex/OpenClaw; npx skills add https://github.com/gate/gate-skills] - https://github.com/sendaifun/skills [Solana skills monorepo — DFlow, Drift, Kamino, Meteora, Orca, Raydium, Sanctum, Helius, Pyth, vulnhunter, code-recon, solana-kit, Pinocchio, Surfpool] - https://github.com/solana-foundation/solana-dev-skill [Official Solana development skill — Anchor/Pinocchio, LiteSVM/Mollusk, security best practices] - https://github.com/metaplex-foundation/skill [Official Metaplex skill — Core NFTs, Bubblegum, Candy Machine, Umi/Kit SDKs] - https://github.com/magicblock-labs/magicblock-dev-skill [MagicBlock development — VRFs, Cranks, Session Keys, latency/privacy on Solana] - https://github.com/tenequm/claude-plugins/tree/main/solana [Solana Claude plugin — Anchor/native Rust, security auditing, ZK compression via Light Protocol] - https://github.com/Lightprotocol/skills [Solana rent-free dev skills — Anchor/Pinocchio without rent-exemption, ZK programs] - https://github.com/quiknode-labs/blockchain-skills [Quicknode blockchain skills — Solana RPC, Jupiter Swap API, Yellowstone gRPC] - https://github.com/sanbir/solidity-auditor-skills [Solidity Auditor Skills — EVM security auditing: 210 attack vectors, 5–7 parallel agents, DeFi checklists, adversarial reasoning; fork of pashov/skills; Claude/Cursor] - https://github.com/shuvonsec/web3-bug-bounty-hunting-ai-skills [Web3 bug bounty skills for Claude Code/Cursor — 10 bug classes from 2,749 Immunefi reports + 681 DeFiHackLabs repros; grep patterns, Foundry PoC templates, Immunefi triage/report format, methodology, case studies; optional MCP (Slither/Aderyn/SWC)] - https://github.com/Z-Bra0/Tx2Poc [Agent skill to turn an EVM transaction ID into a Foundry fork PoC] - https://github.com/sanbir/solana-auditor-skills [Solana Auditor Skills — Rust/SVM security auditing: 105 attack vectors, 4–6 parallel agents, DeFi checklists, adversarial reasoning; Anchor/Native/Pinocchio; Claude/Cursor] - https://github.com/sanbir/move-auditor-skills [Move Auditor Skills — Sui Move security auditing: 143 attack vectors, 5–7 parallel agents, DeFi checklists, adversarial reasoning; Claude/Cursor] - https://github.com/sanbir/ton-auditor-skills [TON Auditor Skills — TON/FunC/Tact security auditing: 120 attack vectors, 4–6 parallel agents, DeFi checklists, adversarial reasoning; Jetton/NFT TEP; Claude/Cursor] ### MCP Servers - https://mcp.solana.com/ [Solana Developer MCP — official Solana and Anchor docs in Cursor/Windsurf/Claude CLI] - https://pond.dflow.net/build/mcp [DFlow MCP — spot + prediction market trading API for Solana] - https://github.com/DesideApp/deside-mcp [Deside MCP — wallet-to-wallet messaging for Solana agents, Ed25519 auth] - https://www.npmjs.com/package/@quicknode/mcp [Quicknode MCP — provision and manage Solana endpoints via natural language] - https://github.com/PraneshASP/foundry-mcp-server [foundry mcp] - https://github.com/strangelove-ventures/web3-mcp [MCP server for multi-chain RPC: Solana, Ethereum, THORChain, XRP, TON, Cardano, UTXO chains] ## 3D / Games ### 3D Graphics - https://github.com/mrdoob/three.js [JavaScript 3D Library] ### Games - https://github.com/aakarkun/unity-web3-skyrim-market [Web3 SkyRim Market - Unity] - https://github.com/0xFableOrg/0xFable [Trading card game] - https://github.com/adrianhajdin/project_web3_battle_game [Web3 NFT Card Game] - https://github.com/EkaterinaGorbunova/web3_nft_card_battle_game [Web3 NFT Card Game] - https://github.com/MoralisWeb3/unity-web3-game-kit [Unity Web3 Game Kit] - https://github.com/web3gamesofficial/web3games-blockchain [Web3Games blockchain network based on Substrate] - https://github.com/alto-io/game3.js [The Web 3.0 Game Framework] - https://github.com/proofofplay/piratenation-contracts [The Pirate Nation game] - https://github.com/MetaMask/red-balloon-game [Red Balloon] - https://github.com/apac-chainchanger/MemeSphinx [MEME Coin Riddles Game on the Flow blockchain] - https://github.com/nhuxhr/sol-connect-four [Connect Four game built on the Solana blockchain] - https://github.com/matthewegyed/BlockchainGambit [A minimalistic chess game on the blockchain using Solidity and Foundry] ## Wallet ### Source Code - https://github.com/MetaMask [MetaMask] - https://github.com/MetaMask/solana-wallet-standard [MetaMask Solana Wallet Standard] - https://github.com/MetaMask/snap-bitcoin-wallet [MetaMask Bitcoin Snap Wallet] - https://github.com/freigeist-m/monero-multisig-gui [Monero multisig wallet GUI: create and coordinate multisig wallets with privacy] - https://github.com/hhanh00/zkool2 [Zkool — open-source Zcash wallet, successor to ywallet] - https://github.com/MetaMask/metamask-extension [MetaMask Extension] - https://github.com/MetaMask/metamask-mobile [MetaMask Mobile] - https://github.com/MetaMask/metamask-desktop [MetaMask Desktop] - https://github.com/ethereum/wallet-poc [The web3 wallet that makes crypto self-custody easy and secure via hybrid account abstraction. EIP-7702 ready] - https://github.com/coinbase/smart-wallet [ ERC-4337 compliant smart contract wallet from Coinbase] - https://github.com/samui-build/samui-wallet [Open Source wallet and toolbox for Solana builders] - https://github.com/solana-foundation/solana-keychain [Framework-agnostic Solana signing — Rust and TypeScript, pluggable backends (memory, KMS, custody)] - https://github.com/ApeWorX/Ruffsack [A rugged multisig wallet for everyday adventures] - https://github.com/0xcregis/anychain [Multi-chain Rust wallet SDK] - https://github.com/coming-chat/wallet-SDK [Multi-chain Wallet SDK] - https://github.com/near/wallet-selector [NEAR Wallet Selector] - https://github.com/Railgun-Community/wallet [RAILGUN Wallet] - https://github.com/artyom-chyornyj/privacy-wallet [Independent Railgun privacy web wallet — mandatory PPOI compliance, contract bytecode + merkle-root verification, user-gated outbound requests; testnet only] - https://github.com/triamazikamno/railoxide [Rust desktop RAILGUN wallet — zero telemetry, built-in Tor, indexed POI tree, Ledger/Trezor + WalletConnect; alpha] ### MPC - https://github.com/fystack/mpcium [Open-source MPC wallet infrastructure — launch distributed crypto wallets with threshold signing in minutes] - https://github.com/coinbase/cb-mpc [Coinbase MPC Library] - https://github.com/bnb-chain/tss-lib [Threshold Signature Scheme, for ECDSA and EDDSA] - https://github.com/vultisig/mobile-tss-lib [Threshold Signature Scheme on mobile] - https://github.com/taurushq-io/multi-party-sig [Implementation of protocols for threshold signatures] - https://docs.binance.org/tss.html [Binance TSS Documentation] - https://hackmd.io/@elichai/legendrery [HD Wallets and the Legendrery PRF in MPC] - https://github.com/grempe/secrets.js [Shamir Secret Sharing (JavaScript)] - https://github.com/jesseduffield/horcrux [Shamir Secret Sharing Tool for Crypto Keys] ### TEE - https://github.com/OP-TEE/optee_os [OP-TEE Trusted OS — secure-side TEE implementation; docs at optee.readthedocs.io] - https://github.com/Safeheron/ssgx [SSGX — Intel SGX native development framework for trusted execution in blockchain and custody workloads] - https://github.com/pkic/remote-key-attestation [Remote key attestation — prove keys are generated and non-exportable in HSM/TPM/secure enclave; published at pkic.org/remote-key-attestation] - https://github.com/svartkanin/linux-sgx-remoteattestation [Linux Intel SGX remote attestation example — enclave, Service Provider, and IAS verification over TLS] - https://github.com/GrapheneOS/AttestationServer [attestation.app remote attestation server — pairs with GrapheneOS Auditor for sample submission and email-alert remote attestation] ### Connection - https://github.com/reown-com/appkit [web] - https://github.com/rainbow-me/rainbowkit [web] - https://github.com/WalletConnect/walletconnect-monorepo [WalletConnect Monorepo] ### Policy - https://github.com/fystack/programmable-policy-engine [Policy-as-code engine for Web3 wallets and treasuries — JSON policies, expr conditions, DENY-overrides-ALLOW] - https://github.com/gmh5225/WDK-Guard [Drop-in offline WDK signing guard — decode + risk verdict (Critical block / High override); SignSafe Chrome wallet + window.ethereum firewall] ### Risk - https://github.com/fystack/address-risk-dashboard [Crypto address risk dashboard — Ethereum address analysis, risk scores, flags, fund flows; Webacy API] - https://github.com/Bemosha/safeagent [Chrome extension — detects clipboard address substitution, unlimited-approval signatures, seed-phrase input forms, typosquatted domains; local detection, MV3, MIT] ## Development ### Smart Contract Templates - https://github.com/mattstam/solidity-template [Solidity Template] - https://github.com/gmh5225/foundry-template [Foundry Template] - https://github.com/Uniswap/foundry-template [Foundry Template] - https://github.com/UMAprotocol/dev-quickstart-oov3 [Foundry quickstart: example contracts and tests for UMA Optimistic Oracle V3 integration] - https://github.com/risc0/risc0-foundry-template [Foundry Template for integrating RISC Zero] - https://github.com/Contract-examples/Avalanche-contract-template [Avalanche Foundry Template] - https://github.com/auditless/cairo-template [Cairo template] - https://github.com/Contract-examples/cairo-example [Cairo template] - https://github.com/rzmahmood/StarkNet-NFT-Template [A Template for deploying NFT Projects on StarkNet] - https://github.com/mart1n-xyz/eip7702-viem-demo [EIP-7702] - https://github.com/5afe/safe-eip7702 [Safe (5afe) EIP-7702 POC — EOA delegates execution to Safe smart account; frontend, relay backend, local/testnet config] - https://github.com/Uniswap/ERC20-eth [ERC-7914] - https://github.com/mpeyfuss/vyper-template [Vyper + Foundry Template] - https://github.com/rafael-abuawad/vyper-foundry-starter [Minimal Vyper + Snekmate + Foundry starter: compile and test Vyper contracts with Forge] - https://github.com/aadeexyz/erc-8004 [ERC-8004: Trustless Agents] - https://github.com/ChaosChain/trustless-agents-erc-ri [ERC-8004: Trustless Agents] ### SDK - https://github.com/Ankr-network/game-unreal-sdk [Mirage Unreal SDK] - https://github.com/jup-ag/jupiter-amm-interface [Jupiter AMM interface crate for implementing a Solana DEX AMM] - https://github.com/magicblock-labs/Solana.Unity-SDK [Unity-Solana SDK] - https://github.com/Virus-Axel/godot-solana-sdk [Godot Solana SDK] - https://github.com/hyperledger/web3j [Lightweight Java and Android library for integration with Ethereum clients] - https://github.com/lambdaclass/libssz [Fast, zkVM-friendly SSZ library for Ethereum consensus (no_std + alloc, merkle/hash-tree-root support)] - https://github.com/gmh5225/UUPSProxyFactorySDK [SDK of UUPSProxyFactory] - https://github.com/gmh5225/permit2-light-sdk [Light SDK of Uniswap-permit2] - https://github.com/gmh5225/Multicall3-SDK [SDK of Multicall3] - https://github.com/nhuxhr/pumpfun-rs [Rust SDK for PumpFun Solana program] - https://github.com/rckprtr/pumpdotfun-sdk [Typescript SDK for PumpFun Solana program] - https://github.com/anza-xyz/solana-sdk [Rust SDK for the Solana blockchain, used by on-chain program developers and the Agave validator] - https://github.com/blueshift-gg/solana-hawk512 [no-std HAWK-512 post-quantum signature verification for SVM — verify-only, prepared-pubkey fast path, ~365k CU] - https://github.com/hoprnet/gnosis-hosted [self-host Gnosis Safe] - https://github.com/gagliardetto/solana-go [Go SDK library and RPC client for the Solana Blockchain] - https://github.com/libbitcoin/libbitcoin-system [Bitcoin cross-platform C++ development toolkit] - https://github.com/libbitcoin/libbitcoin-database [Bitcoin high performance blockchain database] ### Interaction - https://github.com/ethereum/go-ethereum [go ethereum] - https://github.com/ethereum/web3.py [py ethereum] - https://github.com/wevm/viem [js/ts Ethereum] - https://github.com/web3/web3.js [js ethereum] - https://github.com/ethers-io/ethers.js [js ethereum] - https://github.com/mhw0/libethc [c ethereum] - https://github.com/sk1122/solana-sdk [js solana] - https://github.com/firedancer-io/firedancer [Solana validator client — Frankendancer (Firedancer networking + Agave execution) on mainnet; full Firedancer rewrite in development; performance-focused, sandbox-oriented architecture] --- [Read more](https://github.com/gmh5225/awesome-web3-security)
