CTFs and Practice¶
Beginner to Intermediate¶
| Resource | Tier | Focus |
|---|---|---|
| Ethernaut | Must learn | Solidity vulnerability basics. |
| Damn Vulnerable DeFi | Must learn | DeFi exploit patterns. |
| Capture The Ether | Must learn | Classic EVM challenges. |
| Node Guardians | Must learn | Guided Web3 security quests. |
| RareSkills Riddles | Use in real audits | Solidity reasoning practice. |
| Solidity Security by Example | Use in real audits | Vulnerable examples by bug class. |
Advanced and Contest Practice¶
| Resource | Tier | Focus |
|---|---|---|
| Paradigm CTF | Situational / advanced | High-signal EVM and crypto challenges. |
| Paradigm CTF 2022 | Situational / advanced | Advanced blockchain CTFs. |
| BlockSec CTFs | Use in real audits | Curated blockchain CTF collection. |
| minaminao ctf-blockchain | Use in real audits | Blockchain challenge archive. |
| Awesome Starknet Security | Situational / advanced | Curated Cairo/Starknet security practice, tools, and CTFs. |
| Solana Program Security | Must learn | Solana-specific vulnerability practice. |
Practice Rule¶
After solving a challenge, write a short postmortem: vulnerable assumption, exploit path, invariant that failed, test that would catch it, and production monitor that might detect it.