awesome-web3-security

펜테스터와 버그 헌터를 위한 Web3 보안 자료 및 리소스 큐레이션 목록입니다.

If you find that some links are not working, you can simply replace the username with gmh5225. 
Or you can send an issue for me.

아래의 모든 프로젝트에 존경을 표합니다, 완벽한 예술 작품들입니다 🫡

기여하는 방법

• https://github.com/HyunCafe/contribute-practice
• https://docs.github.com/en/get-started/quickstart/contributing-to-projects

AI 에이전트를 위한 스킬

이 저장소는 Cursor, OpenClaw, Claude Code, Codex CLI 및 기타 호환 도구와 같은 AI 에이전트 및 코딩 어시스턴트와 함께 사용할 수 있는 스킬을 제공합니다. 스킬을 설치하여 Web3 보안 주제에 대한 전문 지식을 얻으세요.

learn-skills.dev에서 보기

설치:

npx skills add https://github.com/gmh5225/awesome-web3-security --skill <skill-name>

사용 가능한 스킬:

스킬	설명
mev-security	MEV 개념, 일반적인 공격 및 완화 방법
awesome-web3-security-overview	이 리소스 목록의 이해 및 기여
smart-contract-security	EVM/Solidity 스마트 컨트랙트 보안
solana-security	Solana/Sealevel 보안 연구
web3-security-tooling	보안 도구 (분석기, 퍼저, 디컴파일러)
wallet-security	지갑 보안 (MPC/TSS, 키 관리, 피싱)

예시:

# Install smart contract security skill
npx skills add https://github.com/gmh5225/awesome-web3-security --skill smart-contract-security

# Install multiple skills
npx skills add https://github.com/gmh5225/awesome-web3-security --skill solana-security --skill wallet-security

보안 스타터 팩

• CTF / 실습

  • https://capturetheether.com/ [Capture the Ether]
  • https://ethernaut.openzeppelin.com/ [The Ethernaut]
  • https://www.damnvulnerabledefi.xyz/ [Damn Vulnerable DeFi]
  • https://blockchain-ctf.securityinnovation.com/#/ [Security Innovation Blockchain CTF]
  • https://github.com/nccgroup/GOATCasino [GOAT Casino]
  • https://github.com/paradigm-operations/paradigm-ctf-2021 [Paradigm CTF]
  • https://github.com/blockthreat/blocksec-ctfs [Blocksec CTFs]
  • https://ciphershastra.com/ [ciphershastra CTF]
  • https://github.com/SunWeb3Sec/DeFiVulnLabs [DeFiVulnLabs]
  • https://quillctf.super.site/ [QuillCTF]
  • https://www.vulnmachines.com/ [Vulnmachines]
  • https://www.web3pwn.com/ [Web3Pwn]

• 테스트넷 / 파우셋

  • https://sepolia.dev/ [Sepolia 리소스]
  • https://faucet.circle.com/ [Circle 파우셋 (Sepolia USDC)]

• 마인드맵

  • https://www.xmind.net/m/2zbPP7/ [일반 취약점 마인드맵]
  • https://coggle.it/diagram/YqLzaiSABzXD4UnZ/t/smart-contract-auditor [감사자 마인드맵]
  • https://xmind.works/share/zfdeD07U [도구 마인드맵]

• 입문 도구

  • https://github.com/Quillhash/Web3-Security-Tools [Web3-Security-Tools]
  • https://remix-project.org/ [Remix]

• 블로그 / 사후 분석

  • https://medium.com/immunefi [Immunefi]
  • https://blog.openzeppelin.com/security-audits/ [OpenZeppelin]
  • https://quillaudits.medium.com/ [QuillAudits]
  • https://blog.solidityscan.com/ [SolidityScan]
  • https://medium.com/@Beosin_com [Beosin]
  • https://neptunemutual.medium.com/ [Neptune Mutual]
  • https://blocksecteam.medium.com/ [BlockSec]
  • https://www.certik.com/resources/blog [CertiK]
  • https://mouse-run.beehiiv.com [mouse-run]

• 버그 바운티

  • https://immunefi.com/ [Immunefi]
  • https://hackenproof.com/programs [HackenProof]
  • https://code4rena.com/ [Code4rena]
  • https://gitcoin.co/explorer [Gitcoin]
  • https://hackerone.com [HackerOne]
  • https://spearbit.com/ [Spearbit]
  • https://app.sherlock.xyz/ [Sherlock]
  • https://audits.sherlock.xyz/contests [Sherlock 콘테스트]
  • https://saloon.finance/ [The Saloon]
  • https://hats.finance/ [Hats Finance]
  • https://secure3.io/ [Secure3]
  • https://app.secure3.io/ [Secure3 콘테스트]
  • https://securr.tech/ [Securr]
  • https://r.xyz/ [Remedy]
  • https://hunt.r.xyz/ [Remedy Hunt]
  • https://www.vigilseek.com/bug-bounty [Vigilseek (버그 바운티 통합 사이트)]
  • https://cantina.xyz/ [Cantina]

• 뉴스레터 / 컬렉션

  • https://newsletter.blockthreat.io/ [BlockThreat]
  • https://rekt.news/ [REKT]
  • https://weekinethereumnews.com/ [Week in Ethereum News]
  • https://quillaudits.substack.com/ [HashingBits]
  • https://web3sec.news [Web3sec.news]

• 강연 / 영상

  • https://www.youtube.com/watch?v=lJQwuyW4t-k [IWCON-S22]
  • http://www.youtube.com/watch?v=P8LXLoTUJ5g [LiveOverflow]
  • https://www.youtube.com/watch?v=zcJmWr5_GOc [Web3 보안 마인드셋]
  • https://www.youtube.com/watch?v=QSmtVR0aniI [Web3의 보안과 취약점]
  • https://www.youtube.com/playlist?list=PLox242_JhiuEe64LzW1M8XpiQ2-N5bZsX [재생목록]
  • https://www.youtube.com/watch?v=A5s9aez43Co&list=PLO5VPQH6OWdXKPThrch6U0imGdD3pHLXi [Damn Vulnerable DeFi CTF]
  • https://www.youtube.com/watch?v=cOP9z9XWjwc [인가 공격]
  • https://www.youtube.com/watch?v=TmZ8gH-toX0 [스마트 컨트랙트 감사]
  • https://www.youtube.com/watch?v=gyMwXuJrbJQ [32시간 코스]

• Solidity 배우기

  • https://cryptozombies.io/ [CryptoZombies]
  • https://www.learnweb3.io/ [LearnWeb3]
  • https://www.smartcontract.engineer/ [Smart Contract Engineer]
  • https://solidity-by-example.org/ [Solidity by Example]
  • https://www.web3.university/ [Web3 University]
  • https://www.useweb3.xyz/ [useWeb3]

• 감사 보고서

  • https://github.com/chainsulting/Smart-Contract-Security-Audits [Chainsulting]
  • https://code4rena.com/reports [Code4rena 보고서]
  • https://consensys.net/diligence/audits/ [Consensys]
  • https://github.com/Quillhash/QuillAudit_Reports [QuillAudits]
  • https://github.com/spearbit/portfolio/tree/master/pdfs [Spearbit]
  • https://github.com/sherlock-protocol/sherlock-reports [Sherlock]
  • https://github.com/0xNazgul/Blockchain-Security-Audit-List [감사 목록]
  • https://github.com/shieldify-security/audits-portfolio [Shieldify]

• 자격증

  • https://secops.group/certified-blockchain-practitioner [CBP]
  • https://blockchaintrainingalliance.com/products/cbsp [CBSP]