Updating conversion, creating readmes

This commit is contained in:
Jonas Zeunert
2024-04-19 23:37:46 +02:00
parent 3619ac710a
commit 08e75b0f0a
635 changed files with 30878 additions and 37344 deletions

View File

@@ -1,4 +1,4 @@
 Awesome EVM Security !Awesome (https://awesome.re/badge.svg) (https://awesome.re)
 Awesome EVM Security !Awesome (https://awesome.re/badge.svg) (https://awesome.re)
!Awesome EVM Security (awesome-evm-security.png) (https://github.com/kareniel/awesome-evm-security#readme)
@@ -20,8 +20,7 @@
Guides
- CryptoSec.info (https://cryptosec.info/) - Information to help beginners learn how to protect their funds against hackers and scammers.
- Simplified Roadmap for Blockchain Security (https://devansh.xyz/blockchain-security/2021/09/17/genesis-0x01.html) - Covers all rudimentary topics that one needs to know in order to get into the field of 
Blockchain Security.
- Simplified Roadmap for Blockchain Security (https://devansh.xyz/blockchain-security/2021/09/17/genesis-0x01.html) - Covers all rudimentary topics that one needs to know in order to get into the field of Blockchain Security.
- How to become a smart contract auditor (https://cmichel.io/how-to-become-a-smart-contract-auditor/) - Frequently asked questions that are related to auditing and auditors can get their first job.
Governance
@@ -37,10 +36,9 @@
- Shelling Out: The Origins of Money (https://nakamotoinstitute.org/shelling-out/) - Illustrates the value of collectibles in reducing social transaction costs.
- Foundations of Cryptoeconomic Systems (https://epub.wu.ac.at/7309/8/Foundations%20of%20Cryptoeconomic%20Systems.pdf) - This paper explores why the term
"cryptoeconomics" is context dependent and proposes complementary micro, meso and macro definitions of the term.
- Towards a Practice of Token Engineering (https://blog.oceanprotocol.com/towards-a-practice-of-token-engineering-b02feeeff7ca) - How do we design tokenized ecosystems, their incentives and how do we analyze or 
verify them?
- A Crash Course in Mechanism Design for Cryptoeconomic Applications (https://medium.com/blockchannel/a-crash-course-in-mechanism-design-for-cryptoeconomic-applications-a9f06ab6a976) - Introduces the basic 
concepts of mechanism design, and gives a taste for their usefulness in the cryptocurrency world.
- Towards a Practice of Token Engineering (https://blog.oceanprotocol.com/towards-a-practice-of-token-engineering-b02feeeff7ca) - How do we design tokenized ecosystems, their incentives and how do we analyze or verify them?
- A Crash Course in Mechanism Design for Cryptoeconomic Applications (https://medium.com/blockchannel/a-crash-course-in-mechanism-design-for-cryptoeconomic-applications-a9f06ab6a976) - Introduces the basic concepts of mechanism design, 
and gives a taste for their usefulness in the cryptocurrency world.
- WTF Is QF (https://wtfisqf.com/?grant=&grant=&grant=&grant=&match=1000) - A simple explanation of quadratic funding.
- Bonding Curves Explained (https://yos.io/2018/11/10/bonding-curves) - What bonding curves are and their potential applications.
@@ -48,23 +46,19 @@
- DeFi Safety (https://www.defisafety.com/) - Best practices security score reviews.
- DASP Top 10 of 2018 (https://dasp.co/) - Decentralized Application Security Project Top 10 vulnerabilities.
- IVSCS (https://immunefi.com/severity-updated/) - Immunefi Vulnerability Severity Classification System.
- Smart Contract Security Verification Standard (https://securing.github.io/SCSVS/) - A free 14-part checklist created to standardize the security of smart contracts for developers, architects, security 
reviewers and vendors.
- Secureth guidelines (https://guidelines.secureth.org/) - Aid you in formulating your own software engineering process by giving a complete picture of all the different concerns and expectations in your 
software projects.
- CryptoCurrency Security Standard (CCSS) (https://cryptoconsortium.github.io/CCSS/) - A set of requirements for all information systems that make use of cryptocurrencies, including exchanges, web applications, 
and cryptocurrency storage solutions.
- Smart Contract Security Verification Standard (https://securing.github.io/SCSVS/) - A free 14-part checklist created to standardize the security of smart contracts for developers, architects, security reviewers and vendors.
- Secureth guidelines (https://guidelines.secureth.org/) - Aid you in formulating your own software engineering process by giving a complete picture of all the different concerns and expectations in your software projects.
- CryptoCurrency Security Standard (CCSS) (https://cryptoconsortium.github.io/CCSS/) - A set of requirements for all information systems that make use of cryptocurrencies, including exchanges, web applications, and cryptocurrency 
storage solutions.
- The Solcurity Standard (https://github.com/Rari-Capital/solcurity) - Opinionated security and code quality standard for Solidity smart contracts.
System Assets
- Security Considerations in the Solidity documentation (https://docs.soliditylang.org/en/v0.8.6/security-considerations.html) - Lists some pitfalls and general security recommendations.
- Ethereum 2.0 Specifications Security Audit Report (https://leastauthority.com/static/publications/LeastAuthority-Ethereum-2.0-Specifications-Audit-Report.pdf) - Security Audit Report of the Eth2.0 spec by 
Least Authority.
- Ethereum 2.0 Specifications Security Audit Report (https://leastauthority.com/static/publications/LeastAuthority-Ethereum-2.0-Specifications-Audit-Report.pdf) - Security Audit Report of the Eth2.0 spec by Least Authority.
- Getting Deep Into EVM (https://hackernoon.com/getting-deep-into-evm-how-ethereum-works-backstage-ac7efa1f0015) - An Ultimate, In-depth Explanation of How EVM Works.
- Ethereum EVM illustrated (https://takenobu-hs.github.io/downloads/ethereum_evm_illustrated.pdf) - Exploring some mental models and implementations.
- Ethereum Blockspace: Who Gets What and Why (https://www.aniccaresearch.tech/blog/ethereum-blockspace-who-gets-what-and-why) - Ethereum blockspace market structure.
- What Is Uniswap and How Does It Work? (https://academy.binance.com/en/articles/what-is-uniswap-and-how-does-it-work) - What Uniswap is, how it works, and how you can swap tokens on it simply with an Ethereum 
wallet.
- What Is Uniswap and How Does It Work? (https://academy.binance.com/en/articles/what-is-uniswap-and-how-does-it-work) - What Uniswap is, how it works, and how you can swap tokens on it simply with an Ethereum wallet.
- Scaling EVM (Ethereum Virtual Machine) (https://capitalgram.com/posts/scaling-evm/) - How fast and far can the EVM based blockchain architecture still take us.
- L2Beat (https://l2beat.com/) - Transparent and verifiable insights into emerging layer two (L2) technologies.
- The Non-Fungible Token Bible (https://opensea.io/blog/guides/non-fungible-tokens) - Everything you need to know about NFTs.
@@ -87,24 +81,23 @@
Vulnerabilities
- SWC Registry (https://swcregistry.io/) - Smart Contract Weakness Classification and Test Cases.
- 246 Findings (https://blog.trailofbits.com/2019/08/08/246-findings-from-our-smart-contract-audits-an-executive-summary/) - 246 Findings From Trail of Bits Smart Contract Audits.
- A Survey of Security Vulnerabilities in Ethereum Smart Contracts (https://arxiv.org/pdf/2105.06974.pdf) - Explains eight vulnerabilities that are specific to the application level of blockchain technology by 
analyzing the past exploitation case scenarios of these security vulnerabilities.
- List of Security Vulnerabilities (https://github.com/runtimeverification/verified-smart-contracts/wiki/List-of-Security-Vulnerabilities) - A comprehensive list of common smart contract security 
vulnerabilities, compiled from various sources.
- A Survey of Security Vulnerabilities in Ethereum Smart Contracts (https://arxiv.org/pdf/2105.06974.pdf) - Explains eight vulnerabilities that are specific to the application level of blockchain technology by analyzing the past 
exploitation case scenarios of these security vulnerabilities.
- List of Security Vulnerabilities (https://github.com/runtimeverification/verified-smart-contracts/wiki/List-of-Security-Vulnerabilities) - A comprehensive list of common smart contract security vulnerabilities, compiled from various 
sources.
- List of Known Bugs (https://docs.soliditylang.org/en/v0.8.1/bugs.html) - A JSON-formatted list of some of the known security-relevant bugs in the Solidity compiler.
Controls
- Simple Security Toolkit (https://github.com/nascentxyz/simple-security-toolkit) - Opinionated recommendations that the team at Nascent find to be appropriate, particularly for teams developing and managing 
early versions of a protocol.
- Simple Security Toolkit (https://github.com/nascentxyz/simple-security-toolkit) - Opinionated recommendations that the team at Nascent find to be appropriate, particularly for teams developing and managing early versions of a 
protocol.
- Gnosis Safe (https://docs.gnosis-safe.io) - Multi-sig. Require multiple team members to confirm every transaction in order to execute it, which helps prevent unauthorized access to company crypto.
- List of DeFi auditors (https://www.defisafety.com/auditors) - List of DeFi auditors maintained by DeFiSafety.
- State of DeFi Audits (https://medium.com/conflux-network/the-overlooked-element-of-defi-adoption-e3b29829e3da) - Article taking a look at the auditing space and its importance in onboarding users by properly 
securing new DeFi protocols.
- State of DeFi Audits (https://medium.com/conflux-network/the-overlooked-element-of-defi-adoption-e3b29829e3da) - Article taking a look at the auditing space and its importance in onboarding users by properly securing new DeFi 
protocols.
- Building Secure Contracts (https://github.com/crytic/building-secure-contracts/) - Trail of Bits' guidelines and best practices on how to write secure smart contracts.
- Solidity Patterns (https://fravoll.github.io/solidity-patterns/) - A compilation of patterns and best practices for the smart contract programming language Solidity.
- Security Pattern for Ethereum and Solidity (https://docs.google.com/spreadsheets/d/1PF4QZudW6Z7EV4hqQfwPo3A43AVqPrsuzzzey5yRYcs/edit#gid=0) - Google Sheets Checklists.
- Solidity Best Practices for Smart Contract Security (https://consensys.net/blog/developers/solidity-best-practices-for-smart-contract-security/) - Pro tips from Consensys to ensure your Ethereum smart 
contracts are fortified.
- Solidity Best Practices for Smart Contract Security (https://consensys.net/blog/developers/solidity-best-practices-for-smart-contract-security/) - Pro tips from Consensys to ensure your Ethereum smart contracts are fortified.
- CERtified (https://cer.live/) - Top 100 exchanges by Cybersecurity rating.
- Smart Contract Security Registry (https://github.com/ethereum-lists/contracts) - An effort to identify deployed contracts instances given their chain and address, by listing the project they belong to.
- Forta (https://docs.forta.network/) - Community-based runtime security network for smart contracts.