rhetenor/awesome-awesomeness
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update render script and Makefile

Browse Source
This commit is contained in:
Jonas Zeunert
2024-04-22 21:54:39 +02:00
parent 2d63fe63cd
commit 4d0cd768f7
10975 changed files with 47095 additions and 4031084 deletions
Download Patch File Download Diff File Expand all files Collapse all files

69
terminal/evmsecurity
View File

@@ -1,8 +1,9 @@
 Awesome EVM Security !Awesome (https://awesome.re/badge.svg) (https://awesome.re)
 Awesome EVM Security !Awesome (https://awesome.re/badge.svg) (https://awesome.re)
!Awesome EVM Security (awesome-evm-security.png) (https://github.com/kareniel/awesome-evm-security#readme)
EVM (https://ethereum.org/en/developers/docs/evm/) stands for "Ethereum Virtual Machine". The EVM powers the Ethereum mainnet, but also Layer 2 protocols, sidechains, and EVM-compatible chains.
EVM
 (https://ethereum.org/en/developers/docs/evm/) stands for "Ethereum Virtual Machine". The EVM powers the Ethereum mainnet, but also Layer 2 protocols, sidechains, and EVM-compatible chains.
This list is an overview of the EVM ecosystem from an information security management perspective.
@@ -20,12 +21,14 @@
Guides
- CryptoSec.info (https://cryptosec.info/) - Information to help beginners learn how to protect their funds against hackers and scammers.
- Simplified Roadmap for Blockchain Security (https://devansh.xyz/blockchain-security/2021/09/17/genesis-0x01.html) - Covers all rudimentary topics that one needs to know in order to get into the field of 
Blockchain Security.
- How to become a smart contract auditor (https://cmichel.io/how-to-become-a-smart-contract-auditor/) - Frequently asked questions that are related to auditing and auditors can get their first job.
- Simplified Roadmap for Blockchain Security (https://devansh.xyz/blockchain-security/2021/09/17/genesis-0x01.html) - Covers all rudimentary topics that one needs to know in order to get into
the field of Blockchain Security.
- How to become a smart contract auditor (https://cmichel.io/how-to-become-a-smart-contract-auditor/) - Frequently asked questions that are related to auditing and auditors can get their 
first job.
Governance
- A beginner's guide to DAOs (https://linda.mirror.xyz/Vh8K4leCGEO06_qSGx-vS5lvgUqhqkCz9ut81WwCP2o) - Gives a high level overview of what DAOs are, why they are interesting and some of their use cases.
- A beginner's guide to DAOs (https://linda.mirror.xyz/Vh8K4leCGEO06_qSGx-vS5lvgUqhqkCz9ut81WwCP2o) - Gives a high level overview of what DAOs are, why they are interesting and some of their 
use cases.
- Deep DAO (https://deepdao.io/#/deepdao/dashboard) - Lists, ranks and analyzes top DAOs across multiple metrics.
- SAFT Agreements (https://saftproject.com/) - A commercial instrument used to convey rights in tokens prior to the development of the tokens' functionality.
- Voting Options in DAOs (https://medium.com/daostack/voting-options-in-daos-b86e5c69a3e3) - Voting Options in DAOs.
@@ -37,10 +40,10 @@
- Shelling Out: The Origins of Money (https://nakamotoinstitute.org/shelling-out/) - Illustrates the value of collectibles in reducing social transaction costs.
- Foundations of Cryptoeconomic Systems (https://epub.wu.ac.at/7309/8/Foundations%20of%20Cryptoeconomic%20Systems.pdf) - This paper explores why the term
"cryptoeconomics" is context dependent and proposes complementary micro, meso and macro definitions of the term.
- Towards a Practice of Token Engineering (https://blog.oceanprotocol.com/towards-a-practice-of-token-engineering-b02feeeff7ca) - How do we design tokenized ecosystems, their incentives and how do we analyze or 
verify them?
- A Crash Course in Mechanism Design for Cryptoeconomic Applications (https://medium.com/blockchannel/a-crash-course-in-mechanism-design-for-cryptoeconomic-applications-a9f06ab6a976) - Introduces the basic 
concepts of mechanism design, and gives a taste for their usefulness in the cryptocurrency world.
- Towards a Practice of Token Engineering (https://blog.oceanprotocol.com/towards-a-practice-of-token-engineering-b02feeeff7ca) - How do we design tokenized ecosystems, their incentives and 
how do we analyze or verify them?
- A Crash Course in Mechanism Design for Cryptoeconomic Applications (https://medium.com/blockchannel/a-crash-course-in-mechanism-design-for-cryptoeconomic-applications-a9f06ab6a976) - 
Introduces the basic concepts of mechanism design, and gives a taste for their usefulness in the cryptocurrency world.
- WTF Is QF (https://wtfisqf.com/?grant=&grant=&grant=&grant=&match=1000) - A simple explanation of quadratic funding.
- Bonding Curves Explained (https://yos.io/2018/11/10/bonding-curves) - What bonding curves are and their potential applications.
@@ -48,23 +51,23 @@
- DeFi Safety (https://www.defisafety.com/) - Best practices security score reviews.
- DASP Top 10 of 2018 (https://dasp.co/) - Decentralized Application Security Project Top 10 vulnerabilities.
- IVSCS (https://immunefi.com/severity-updated/) - Immunefi Vulnerability Severity Classification System.
- Smart Contract Security Verification Standard (https://securing.github.io/SCSVS/) - A free 14-part checklist created to standardize the security of smart contracts for developers, architects, security 
reviewers and vendors.
- Secureth guidelines (https://guidelines.secureth.org/) - Aid you in formulating your own software engineering process by giving a complete picture of all the different concerns and expectations in your 
software projects.
- CryptoCurrency Security Standard (CCSS) (https://cryptoconsortium.github.io/CCSS/) - A set of requirements for all information systems that make use of cryptocurrencies, including exchanges, web applications, 
and cryptocurrency storage solutions.
- Smart Contract Security Verification Standard (https://securing.github.io/SCSVS/) - A free 14-part checklist created to standardize the security of smart contracts for developers, 
architects, security reviewers and vendors.
- Secureth guidelines (https://guidelines.secureth.org/) - Aid you in formulating your own software engineering process by giving a complete picture of all the different concerns and 
expectations in your software projects.
- CryptoCurrency Security Standard (CCSS) (https://cryptoconsortium.github.io/CCSS/) - A set of requirements for all information systems that make use of cryptocurrencies, including 
exchanges, web applications, and cryptocurrency storage solutions.
- The Solcurity Standard (https://github.com/Rari-Capital/solcurity) - Opinionated security and code quality standard for Solidity smart contracts.
System Assets
- Security Considerations in the Solidity documentation (https://docs.soliditylang.org/en/v0.8.6/security-considerations.html) - Lists some pitfalls and general security recommendations.
- Ethereum 2.0 Specifications Security Audit Report (https://leastauthority.com/static/publications/LeastAuthority-Ethereum-2.0-Specifications-Audit-Report.pdf) - Security Audit Report of the Eth2.0 spec by 
Least Authority.
- Ethereum 2.0 Specifications Security Audit Report (https://leastauthority.com/static/publications/LeastAuthority-Ethereum-2.0-Specifications-Audit-Report.pdf) - Security Audit Report of the
Eth2.0 spec by Least Authority.
- Getting Deep Into EVM (https://hackernoon.com/getting-deep-into-evm-how-ethereum-works-backstage-ac7efa1f0015) - An Ultimate, In-depth Explanation of How EVM Works.
- Ethereum EVM illustrated (https://takenobu-hs.github.io/downloads/ethereum_evm_illustrated.pdf) - Exploring some mental models and implementations.
- Ethereum Blockspace: Who Gets What and Why (https://www.aniccaresearch.tech/blog/ethereum-blockspace-who-gets-what-and-why) - Ethereum blockspace market structure.
- What Is Uniswap and How Does It Work? (https://academy.binance.com/en/articles/what-is-uniswap-and-how-does-it-work) - What Uniswap is, how it works, and how you can swap tokens on it simply with an Ethereum 
wallet.
- What Is Uniswap and How Does It Work? (https://academy.binance.com/en/articles/what-is-uniswap-and-how-does-it-work) - What Uniswap is, how it works, and how you can swap tokens on it 
simply with an Ethereum wallet.
- Scaling EVM (Ethereum Virtual Machine) (https://capitalgram.com/posts/scaling-evm/) - How fast and far can the EVM based blockchain architecture still take us.
- L2Beat (https://l2beat.com/) - Transparent and verifiable insights into emerging layer two (L2) technologies.
- The Non-Fungible Token Bible (https://opensea.io/blog/guides/non-fungible-tokens) - Everything you need to know about NFTs.
@@ -87,26 +90,28 @@
Vulnerabilities
- SWC Registry (https://swcregistry.io/) - Smart Contract Weakness Classification and Test Cases.
- 246 Findings (https://blog.trailofbits.com/2019/08/08/246-findings-from-our-smart-contract-audits-an-executive-summary/) - 246 Findings From Trail of Bits Smart Contract Audits.
- A Survey of Security Vulnerabilities in Ethereum Smart Contracts (https://arxiv.org/pdf/2105.06974.pdf) - Explains eight vulnerabilities that are specific to the application level of blockchain technology by 
analyzing the past exploitation case scenarios of these security vulnerabilities.
- List of Security Vulnerabilities (https://github.com/runtimeverification/verified-smart-contracts/wiki/List-of-Security-Vulnerabilities) - A comprehensive list of common smart contract security 
vulnerabilities, compiled from various sources.
- A Survey of Security Vulnerabilities in Ethereum Smart Contracts (https://arxiv.org/pdf/2105.06974.pdf) - Explains eight vulnerabilities that are specific to the application level of 
blockchain technology by analyzing the past exploitation case scenarios of these security vulnerabilities.
- List of Security Vulnerabilities (https://github.com/runtimeverification/verified-smart-contracts/wiki/List-of-Security-Vulnerabilities) - A comprehensive list of common smart contract 
security vulnerabilities, compiled from various sources.
- List of Known Bugs (https://docs.soliditylang.org/en/v0.8.1/bugs.html) - A JSON-formatted list of some of the known security-relevant bugs in the Solidity compiler.
Controls
- Simple Security Toolkit (https://github.com/nascentxyz/simple-security-toolkit) - Opinionated recommendations that the team at Nascent find to be appropriate, particularly for teams developing and managing 
early versions of a protocol.
- Gnosis Safe (https://docs.gnosis-safe.io) - Multi-sig. Require multiple team members to confirm every transaction in order to execute it, which helps prevent unauthorized access to company crypto.
- Simple Security Toolkit (https://github.com/nascentxyz/simple-security-toolkit) - Opinionated recommendations that the team at Nascent find to be appropriate, particularly for teams 
developing and managing early versions of a protocol.
- Gnosis Safe (https://docs.gnosis-safe.io) - Multi-sig. Require multiple team members to confirm every transaction in order to execute it, which helps prevent unauthorized access to company 
crypto.
- List of DeFi auditors (https://www.defisafety.com/auditors) - List of DeFi auditors maintained by DeFiSafety.
- State of DeFi Audits (https://medium.com/conflux-network/the-overlooked-element-of-defi-adoption-e3b29829e3da) - Article taking a look at the auditing space and its importance in onboarding users by properly 
securing new DeFi protocols.
- State of DeFi Audits (https://medium.com/conflux-network/the-overlooked-element-of-defi-adoption-e3b29829e3da) - Article taking a look at the auditing space and its importance in onboarding
users by properly securing new DeFi protocols.
- Building Secure Contracts (https://github.com/crytic/building-secure-contracts/) - Trail of Bits' guidelines and best practices on how to write secure smart contracts.
- Solidity Patterns (https://fravoll.github.io/solidity-patterns/) - A compilation of patterns and best practices for the smart contract programming language Solidity.
- Security Pattern for Ethereum and Solidity (https://docs.google.com/spreadsheets/d/1PF4QZudW6Z7EV4hqQfwPo3A43AVqPrsuzzzey5yRYcs/edit#gid=0) - Google Sheets Checklists.
- Solidity Best Practices for Smart Contract Security (https://consensys.net/blog/developers/solidity-best-practices-for-smart-contract-security/) - Pro tips from Consensys to ensure your Ethereum smart 
contracts are fortified.
- Solidity Best Practices for Smart Contract Security (https://consensys.net/blog/developers/solidity-best-practices-for-smart-contract-security/) - Pro tips from Consensys to ensure your 
Ethereum smart contracts are fortified.
- CERtified (https://cer.live/) - Top 100 exchanges by Cybersecurity rating.
- Smart Contract Security Registry (https://github.com/ethereum-lists/contracts) - An effort to identify deployed contracts instances given their chain and address, by listing the project they belong to.
- Smart Contract Security Registry (https://github.com/ethereum-lists/contracts) - An effort to identify deployed contracts instances given their chain and address, by listing the project 
they belong to.
- Forta (https://docs.forta.network/) - Community-based runtime security network for smart contracts.
Ecosystem