TutorialWeb3 Security
Proxy, UUPS & Storage Collision Bugs for Auditors
Transparent vs UUPS, uninitialized implementations, and storage-layout collisions — local forge inspect lab. No live upgrades.
35 min lab
Loading…
Published work filed under Web3 Security.
Transparent vs UUPS, uninitialized implementations, and storage-layout collisions — local forge inspect lab. No live upgrades.
How to write an Immunefi-ready bug report: structure, PoC expectations, severity language — template practice only.
First-depositor donation can round the next mint to zero shares. Local toy vault plus OpenZeppelin virtual-offset discussion.
Missing chainId, permit phishing, and ecrecover to the zero address — replay a toy signature across two local chain ids.
Spot, TWAP, and Chainlink staleness for bug hunters — price-assumption checklist on a local toy lender. No live oracle attacks.
Flash loans as amplifiers — not magic bugs — with Aave-style callback mental models and DVD / local CTF lab pointers. Authorized labs only.
Hunter workflow for verified and unverified contracts: Etherscan Contract tab, Sourcify exact vs match, ABI decoding, and read-only cast storage on a public exa…
Access control bugs hunters actually find — missing onlyOwner, initializer takeover, and tx.origin auth — with an Ethernaut-style Foundry lab.
Practical Foundry + Slither setup: foundryup, forge init, Slither venv, slither . on a local vulnerable vault, optional Aderyn. Anvil/local forks only.
Classic, cross-function, and read-only reentrancy for bug hunters — CEI, guards, OWASP SC08:2026, and a Foundry PoC against a local vulnerable vault only.
Solidity for bug hunters: a read-first primer on visibility, msg.sender vs tx.origin, call vs delegatecall, value transfers, and CEI — with tiny snippets only.…
Practical wallet, public RPC, and Etherscan/Sourcify setup for smart contract hunters — burner accounts, read-only chain access, and a lab that explains one his…
Where and how to submit in 2026. Teach process, not spray-and-pray.
Hunter view of governance, bridges, and L2 trust. Read three public write-ups. No live probing.
The Andrax learning path for web3 bug hunting in 2026: ethics fence, platform map, ordered guides, toolchain, CTF→First Flight→bounty ladder, and how to study p…
A beginner-friendly, ethics-first guide to how to start web3 bug hunting in 2026 — authorized bounties, local forks/CTFs, and an Immunefi scope checklist.
Pick a public-scope program, run a fork-only hunter loop, and stop before any mainnet or public-testnet interaction.