Attacker calls back into your contract before state is updated. Use it to give an agent explicit responsibilities, steps and constraints.

Opinionated security and code quality standard for Solidity smart contracts. Use it as a repeatable review, validation or hardening pass.

A collection of resources to study Solana smart contract security, auditing, and exploits. Use it as a repeatable review, validation or hardening pass.

This work is licensed under a Creative Commons Attribution 4.0 International License. Use it to ground design choices in named patterns, trade-offs and examples.

Multiparty computation (MPC) allows several parties to jointly compute on secrets without revealing them. This list is designed to be a central place where everyone can find open-source software designed for MPC as well as introductory material to this topic. The list format is i. Use it as a repeatable review, validation or hardening pass.

Collection of post-quantum cryptographic algorithms for the ARM Cortex-M4. Use it to navigate the topic and choose relevant methods, papers or tools.

Zero-Knowledge Proofs Starter Pack: alternative introductory list for beginners (more videos). Use it to build a structured path from fundamentals to hands-on practice.

This is a software to benchmark various secure multi-party computation (MPC) protocols in a variety of security models such as honest and dishonest majority, semi-honest/passive and malicious/active corruption. The underlying technologies span secret sharing, homomorphic encrypti. Use it to navigate the topic and choose relevant methods, papers or tools.

While planning the Chaincode Residency, we put considerable effort into finding the best resources and creating a curriculum around Lightning protocol development. You can find all of our published materials on our resources page. Use it to build a structured path from fundamentals to hands-on practice.

Software for the SPDZ, MASCOT, and Overdrive secure multi-party computation protocols. See Programs/Source/ for some example MPC programs, and tutorial.md for a basic tutorial. Use it to navigate the topic and choose relevant methods, papers or tools.

This repository contains some heuristics that can be used when auditing smart contracts to get ideas for vulnerabilities/common pitfalls. The goal of this repository is not to list concrete vulnerabilities (there are already a lot of great resources for that, e.g. prior audit rep. Use it as a repeatable review, validation or hardening pass.

LNP/BP stands for "Bitcoin Protocol / Lightning Network Protocol". This repository covers standards & best practices for Layer 2+ in cases when they do not require soft- or hard-forks of the Bitcoin blockchain level and are not directly related to issues covered in Lightning Netw. Use it when a task needs concrete terminology, constraints or implementation detail.

Heimdall is an advanced EVM smart contract toolkit specializing in bytecode analysis and extracting information from unverified contracts. Heimdall is written in Rust and is designed to be fast, modular, and more accurate than other existing tools. Use it to navigate the topic and choose relevant methods, papers or tools.

In this repository you can find semgrep rules that look for patterns of vulnerabilities in smart contracts based on actual DeFi exploits as well as gas optimization rules that can be used as a part of the CI pipeline. The rules are part of the semgrep registry under p/smart-contr. Use it to ground design choices in named patterns, trade-offs and examples.