Smart Contract Auditor
Step 1
Blockchain Fundamentals
Proof of Work vs Proof of Stake
Step 2
Solidity Fundamentals
Step 4
Smart Contract Testing/Debugging
Step 5
Step 6
Step 8
Smart Contract Attack Vectors
Step 7
Upgradeable Contracts
Step 10
CTFs
Step 11
DeFi Deep Dive
Protocol Deep Dives:
Uniswap v2/v3/v4, Compound, Curve, Aave, Balancer, Gearbox
Step 12
DeFi Attack Vectors
Front-Running => Sandwich attacks
Flash Loan => Price Oracle Manipulation
Rug Pulls => Unlimited Token Allowance
Step 13
Postmortems & BugFixes
Staking Rewards, Vaults
Step 14
Report Reading
Step 17
Arsenal
Step 18
Continuous Learning and Research
Join Security Communities on Discord: Immunefi, Secureum, Blockchain Pentesting, Eth Security, Eth R&D
Newsletters: Blockthreat
Be Active on Twitter & follow up with latest research, and attack vectors
Ethereum Smart Contract Auditor Roadmap
© Razzor
Step 15
Security Standards
& Checklists
Step 3
Gas Optimizations
ERC Standards
Other Standards: ERC2981
Deep Dive Research Papers: Arxiv
Database: Solodit
Step 16
Core: 150, 1559, 2929, 2930, 3198, 3529, 3675, 4399, 1153, 4758
ERC: 165, 1167, 1271, 2535, 2612, 2771, 2981, 4337, 4626
Interface: 712
Meta: All
Step 9
Yul