
Decentralized Finance (DeFi) has already existed since 2018, but it has recently witnessed a surge in popularity in the first half of 2021 with no ceiling in sight. Use this book to gain insight into the novel financial innovations enabled by DeFi. Join us in this exciting adventure of redefining finance.

Decentralized Finance is taking over the world. Learn how to get started and join the revolution.

How to DeFi: Advanced


Decentralized Finance (DeFi) is fast disrupting the traditional financial sector. This updated version of How To DeFi is a must-read book for anyone looking to learn DeFi. It is packed with simple explanations and step-by-step guides to help you understand and get started in this fast-developing ecosystem.

How to DeFi


Cipher Shastra is a playground where anyone can enhance their Security Skills by solving and learning from CTF like challenges. 

The playground is open source and anyone can contribute challenges to it
Twitter: @ciphershastra

Cipher Shastra


Wriggly is a web3 learning platform to practice smart contract coding challenges and enhance your blockchain skills.

Wriggly wants to change the way blockchain talent is assessed and create a collaborative platform for developers to learn.

Wriggly is a web3 learning platform to practice smart contract coding challenges and enhance your blockchain skills.

Wriggly

Teaching the next generation of smart contract developers and auditors. Learn from industry-leading experts how to build the next generation of web3 applications and level up your career.


Level up your web3 career through industry leading comprehensive courses

Cyfrin Updraft


This course is for students wishing to explore blockchain technology’s potential use—by entrepreneurs & incumbents—to change the world of money and finance.

Kicking off with a review of the technology’s initial application, the cryptocurrency Bitcoin, students will gain an understanding of the commercial, technical and public policy fundamentals of blockchain technology, distributed ledgers and smart contracts in both open sourced and private applications.

The class will then turn to current and potential blockchain applications in the financial sector. This will include reviews of potential use cases for payment systems, central banking, venture  capital, secondary market trading, trade finance, commercial banking, post trade possessing and digital ID.

Along the way, we will explore the markets and regulatory landscape for cryptocurrencies, initial coin offerings, other tokens and crypto derivatives.

This course is for students wishing to explore blockchain technology's potential use—by entrepreneurs and incumbents—to change the world of money and finance.

Blockchain and Money


The purpose of this class is to bring together students and interdisciplinary experts in Computer Science and Finance to discuss the emerging area of Decentralized Finance (or DeFi). DeFi has experienced an unprecedented growth, with hundreds of projects and a countless stream of financial, distributed systems, and blockchain innovations. The total value locked (TVL) in decentralized finance — a measure of the total value of assets committed to the DeFi ecosystem — has reached over $80 billion. When compared to the traditional centralized finance (CeFi), DeFi offers products and services serving similar financial goals, but critically innovates with novel capabilities such as instantaneous multi-billion USD flash loans. By utilizing blockchain and smart contract technologies, DeFi as a whole aims to provide a new platform for programmable, automated finance services that remove the reliance on central trust and intermediaries.

Our goal is to provide a framework to understand this new area of financial services. For each finance function, we will consider 1) the current intermediated structure, and then b) the DeFi version (actual or proposed) that fulfills the function. Is either one of these optimal? We will evaluate both through the lens of CS and finance. Is the application computable (efficiency, decidable), programmable (automatic)? Is the application welfare-enhancing and stable (not a source of systemic risk). How do the new and old systems interact? We aim for the students to be able to critically evaluate whether a new DeFi protocol is novel and practical. We further will capture the security danger in DeFi, as well as their impact on the underlying consensus security. Lastly, we hope to give an insight into how to program and structure secure and incentive-compatible DeFi applications.

Through the exposure to cutting-edge research as well as remaining open challenges, we hope for our students to quickly integrate into academic as well as industrial projects related to DeFi.

Summarizing, we will cover a broad spectrum of topics, including:

- A comprehensive introduction covering a computer science and finance background required for the remainder of the course. We will discuss the basics of decentralized systems, permissionless blockchains, consensus, smart contracts and contrast DeFi to traditional finance.

- We will cover the computer science and economic aspects of DeFi assets, and how they link to CeFi through stablecoins. The course will elaborate on DeFi asset exchanges and contrast the traditional limit order book models to automated market makers. Just like in CeFi, debt and derivatives play a fundamental role in DeFi. We’ll dive into the various debt models, such as under- and over-collateralized debt, as well as synthetic assets in DeFi. Insurances, portfolio management and prediction markets form equally crucial elements to a decentralised economy as we will elaborate on. Last but not least, we will show different attempts at measuring and tracking systemic risk and its computability.

- To link blockchains with financial information from the real-world, we will provide a deep-dive into oracles. We will discuss decentralized reputation, identities and proof of properties. Because most DeFi is transparently readable, including transaction amounts, fees, dates/times, etc, privacy plays an increasingly important role in DeFi. We will cover various privacy technologies including zero-knowledge proofs and their applications in DeFi. We will also discuss various attempts at how to enforce data ownership, data monetization and valuation as well as controlled use and misuse of data.

- A digital economy would not thrive without strong security. We will outline the many past security attacks, introspect a few of them in closer detail and provide recommendations on how to strengthen DeFi security. We will discuss the systemic risks stemming from Miner Extractable Value (MEV) and how MEV can be minimized by design. Decentralized governance provides power to a pseudonymous collective, and we will explore how governance works, and how it may be attacked.


The purpose of this class is to bring together students and interdisciplinary experts in Computer Science and Finance to discuss the emerging area of Decentralized Finance (or DeFi).

DeFi MOOC


Learn how to create tokens in the Ethereum Blockchain

Introduction to Tokens in Ethereum


Join our odyssey to onboard 1 million to web3. 

Odyssey DAO


Token engineering is the design, verification and optimization of token-based economic systems.
It is a cross-disciplinary field that draws from established practices in systems, electrical, robotics & controls engineering, and more. It also draws from fields as diverse as behavioural & ecological economics, operations research, AI & optimization, and others.

It is a methodology that goes all the way from ideation to design, modelling, simulation, testing, deployment, fraud detection & defense, and continuous optimization.

Study, contribute to open-source knowledge & tools, and apply your skills to solve the most exciting challenges in Web3.

Token Engineering Academy


The 1inch Network is your one-stop access to decentralized finance. A distributed network for various protocols on Ethereum, BNB Chain, Avalanche, Polygon, Optimism, Arbitrum, Gnosis and Fantom.

The 1inch Foundation's key activity is to provide funding to entities and initiatives that contribute to long-term and sustainable growth of the 1inch Network.

The 1inch Foundation grant program fosters growth and expansion of the 1inch Network and incentivizes contributions through grants and resources.

1inch Foundation grant program


Aave Grants DAO is a community-led grants program to fund ideas submitted by the Aave protocol’s community, with a focus on empowering a wider network of community developers. The community has allocated $1 million per quarter for two quarters for funding grants. The program will run from May 10 to November 10. The grants program was created after a community discussion, which can be found on Aave's governance forum here.

Aave Grants DAO provides grants to projects, ideas, and events that benefit Aave and its ecosystem

Aave Grants


The BAL Grant program provides support and funding ($1K - $75K) to projects committed to supporting Balancer Protocol in achieving its mission to become the number one source for Decentralized exchange trades. This program is a good fit for individuals and groups that want to run a project that builds technology or resources on the Balancer Protocol. 

The BAL Grant program is one way BalancerDAO promotes the development of the Balancer Protocol and Ecosystem

Balancer Grants


The Chainlink grant program deploys substantial resources toward the creation of critical developer tooling, the addition of high-quality data, and the launching of key services around the Chainlink Network.

- Community grants
- Integration grants
- Bug bounty program
- Research program
- Social impact grants

The Chainlink Community Grant Program funds development teams and researchers building a more functional, accessible, and socially impactful smart contract economy

Chainlink Grants


The community has allocated 5,000 COMP for funding grants. The grants program was created after a community discussion. which can be found on Compound's governance forum. 

https://www.comp.xyz/t/compound-grants-program/1292

Providing grants to projects, ideas and events that benefit Compound and its ecosystem

Compound Grants


We launched this effort with a focus on enabling the entire user base, with its wide range of talents, to contribute those skills to the protocol in their own ways-whatever those ways are! Our approach to achieving that goal is to offer users the option to apply for Micro Grants in addition to proposals that require much more attention. These will serve as the on-ramp for the less involved, smaller budget proposals in an effort to be accessible by the entire userbase.

The PoolTogether grants committee “Community Led, Community Focused.”

PoolTogether Grants


Synthetix GrantsDAO is a decentrailzed organisation part of the Synthetix protocol that governs the process of funding projects that contribute to the adoption of Synthetix.

Funding Synthetix related community & public goods projects

Synthetix Grants Council


The UNI community is at the heart of everything we do and it is thanks to you all that we have gotten this far. The goal for UGP is to ensure sustainable growth for the passionate ecosystem that has dedicated so much time and effort in growing the protocol. 

Our mission is to continue cultivating this enthusiasm and talent, so to start, UGP seeks to support focused areas accomplishing the following:

- **Usability** - improving the user experience
- **Community** - growing the ecosystem
- **Tooling** - improving the developer experience

Support is available for both individuals and teams attempting to provide innovative solutions, tackling problems, or contributing to existing tools for the three focused areas above.

The UNI Grants Program continues to expand and empower the Uniswap community

UNI Grants


Increase safety and transparency for DeFi through a community-driven product risk history and scoring resource.

DeFi Risk Tools & Resources


## What is DeFi?

Decentralised Finance (DeFi) is a term for web3 applications in the financial sector. They replicate the services of traditional financial service providers on a decentralised infrastructure, allowing permissionless access.

They thus promise access to financial services without the need for a bank account or verification by a central provider, leading to greater financial inclusion. On the other hand, most of the volume is currently created by experienced DeFi users. Some individuals are even creating scam DApps, so be careful.

DeFi is one of the main use cases of web3. Especially during the so-called "DeFi Summer" in 2020, there was an explosion in the use and popularity of DeFi applications. Most of the DeFi market is on Ethereum, but many applications are now on multiple chains. These typically allow for lower transaction costs.

If you want to contribute to the guide, [have a look on Github](https://github.com/wslyvh/useWeb3/tree/main).

### Some of the characteristics of DeFi:

- **Permissionless**: Use your wallet instead of a bank account. Thanks to the peer-to-peer structure, there is no centralized entity that controls decision-making. However, your funds are your own responsibility.
- **Global**: It doesn’t matter where you are, DeFi is a global phenomenon.
- **Fast**: Transactions are finished rapidly compared to bank transfers, especially for cross-border transfers.
- **Pseudonymous**: People act through their wallet addresses, no personal information needed.
- **Transparent**: Transactions are public, though, and often the code of the applications is open-source.

DeFi essentially extends the "digital money" premise of bitcoin beyond simply making payments with digital currency. DeFi applications allow you to trade crypto, create derivatives, borrow and lend, earn interest or buy insurance. In the next section, we will explain the broader areas of DeFi.

Some intro pages and learning resources to start your DeFi journey:

- [_Ethereum.org DeFi intro page_](https://ethereum.org/en/defi)
- [_Rekt news_](https://rekt.news/de/)
- [_Finematics Youtube channel_](https://www.youtube.com/c/Finematics)
- [_The Defiant news_](https://thedefiant.io/)
- [_Bankless Podcast and newsletter_](https://www.bankless.com/)
- [_DeFi course by the University of Nicosia_](https://www.unic.ac.cy/blockchain/free-mooc/)

## Areas of DeFi

DeFi applications are designed to do the same things as traditional financial service providers. As a result, there is a wide variety of DApps that qualify as such. In fact, some use cases are only created thanks to the nature of smart contracts.

- **Payments**: low-cost (cross-border) transactions with crypto, e.g. using stablecoins
- **Swapping (DEXes)**: “Decentralized Exchanges” allow for trading of digital assets, e.g. Uniswap
- **Bridging**: Similar to DEXes, but among multiple chains (cross-chain transfers), e.g. HOP
- **Lending and borrowing**: Get a loan or earn interest for providing your tokens, e.g. AAVE
- **Decentralized staking**: Participate in the consensus of proof-of-stake protocols and earn interest, e.g. Rocketpool
- **Derivatives**: Trade or create options, futures or other synthetics assets, e.g. Synthetix
- **Insurance**: Buy coverage for risks with automated claims, e.g. Nexus Mutual
- **Fundraising / grants**: Collect funds for your project by a decentralized crowd or get distributed a grant, e.g. Juicebox
- **Bets / prediction markets**: Create bets with tokens and forecast future events

There are many other DeFi application areas, and some that are still unexplored. To dive deeper, you can check out DeFi DApps and metrics on these websites:

- [_DeFiLlama, popular DeFi explorer_](https://defillama.com/)
- [_DeBank wallet explorer_](https://debank.com/)
- [_Alchemy DeFi DApps list_](https://www.alchemy.com/top/defi-dapps)
- [_Tokenterminal industry metrics_](https://tokenterminal.com/terminal)
- [_Blockchain.com DeFi explorer_](https://www.blockchain.com/explorer/defi)
- [_Bad debt lending metrics_](https://bad-debt.riskdao.org/)

Some DeFi use cases are just waiting for someone to build them! DeFi applications can be a great playground, whether you're a new developer getting your hands dirty for the first time, or a seasoned developer making the transition to the web3 space.

There are different areas for developers within DeFi: you can specialize in writing smart contracts for DeFi, researching the dynamics of a DApp, or building user-friendly interfaces for interacting with them. As DeFi DApps often deal with a lot of capital, they require strong security measures, hence developers specializing in DeFi security.

You can find a lot of DeFi DApps tutorials on useweb3. Check them out [here](https://www.useweb3.xyz/search?page=1&q=DeFi&size=100):

- [_DeFi Developer roadmap GitHub repo_](https://github.com/OffcierCia/DeFi-Developer-Road-Map)
- [_Buildbear DeFi building tutorials_](https://www.buildbear.io/resources/guides-and-tutorials)
- [_Uniswap V2 contract walkthrough_](https://ethereum.org/en/developers/tutorials/uniswap-v2-annotated-code)
- [_DeFi Hack coding challenges_](https://www.defihack.xyz/)
- [_Rareskills Uniswap V2 book_](https://www.rareskills.io/uniswap-v2-book)
- [_Rareskills Compound V3 book_](https://www.rareskills.io/compound-v3-book)

## DeFi Security

One of the biggest risks in DeFi is the loss of funds due to hacks and other security issues. In recent years, there have been hacks that have drained up to $600 million from DeFi applications. Therefore, becoming a DeFi security specialist can be a promising career path.

Security breaches, such as hacks or exploits, can result in significant financial losses for users and damage to the platform's reputation. By focusing on DeFi security, you can help mitigate these risks and protect users' assets.

Learn more about DeFi hacks and how to prevent them:

- [_Rekt leaderboard_](https://rekt.news/leaderboard/)
- [_DeFi Exploit timeline_](https://chainsec.io/defi-hacks/)
- [_GitHub DeFi risk tools_](https://github.com/defi-defense-dao/defi-risk-tools-list)
- [_Damn Vulnerable DeFi code challenges_](https://www.damnvulnerabledefi.xyz/)
- [_DeFi Risk Tools & Resources Guide_](https://github.com/defi-defense-dao/defi-risk-tools-list)
- [_Blockchain Threat Intelligence Newsletter_](https://newsletter.blockthreat.io/archive)

## Degen Glossary

When you’re new to DeFi, you will probably encounter some specific vocabulary. We have summarized the most important terms for you. Find more terms about web3 in general in the crypto glossary.

- **APR / APY**:  
  Annual Percentage Rate / Annual Percentage Yield, measures the interest or yield earned over a year

- **Aggregators**:  
  Platforms that bundle multiple sources for optimal trade execution, e.g., DEX aggregators

- **Arbitrage**:  
  Term to describe the exploiting of price differences for profit across different markets

- **ATH**:  
  All-Time High, the highest price an asset has ever reached

- **Bonding Curve**:  
  Formula for determining the price of assets in a decentralized exchange

- **CDP**:  
  Collateralized Debt Position, a system for creating crypto-collateralized stablecoins, first created by Maker for the DAI stablecoin

- **Collateral**:  
  Assets pledged to secure loans in DeFi protocols

- **Degen**:  
  Degenerate, term for a person that is deeply involved in DeFi or another sector

- **Flash Loan**:  
  Taking out an uncollateralized loan and repaying it immediately, typically within a single transaction, e.g. to exploit arbitrage opportunities

- **Frontrunning**:  
  Type of MEV, prioritizing one's own transactions to profit from others' trades

- **Impermanent Loss**:  
  Loss experienced by liquidity providers due to volatility of the underlying assets

- **Liquidity Mining / Yield Farming**:  
  Systematically provide liquidity to DeFi protocols to earn interest, often in multiple layers

- **Liquidity Pools**:  
  Pools of crypto assets used for decentralized liquidity provisioning on platforms like DEXes

- **LP Token**:  
  Liquidity Provider Tokens represent ownership in a liquidity pool, usually in a DEX, they can be redeemed for their stake in the pool plus the fees earned

- **MEV**:  
  Maximal Extractable Value, the profit miners or validators can make by including, excluding or reordering transactions, sometimes called “invisible tax”

- **Pump and Dump**:  
  Coordinated market manipulation to inflate and then sell off tokens

- **Rebalancing**:  
  Adjusting portfolio allocations to maintain the desired strategy, e.g., rebalancing positions according to market capitalization

- **Rug Pull**:  
  Scenario in which a team abandons a project and/or removes its liquidity, similar to exit scams

- **Sandwich attack**:  
  An exploitative trading strategy where an attacker sandwiches a swap between two transactions to make a profit

- **Slippage**:  
  Price difference between the expected and actual execution price of a trade

- **Stablecoin**:  
  A cryptocurrency that is pegged to another asset, mostly USD

- **Synthetic Assets**:  
  Financial instruments that synthetically replicate a certain strategy, including real-world assets or other cryptocurrencies, e.g., leveraged ETH

- **TVL**:  
  Total Value Locked, equivalent of USD locked in a blockchain or protocol, often used as an indicator in DeFi, e.g., in lending protocols

- **TVL Ratio**:  
  Ratio of a protocol's Total Value Locked to its market capitalization, an indicator to evaluate the valuation of a protocol


DeFi is one of the key areas in web3: the guide introduces the concept and provides resources for using and developing DeFi applications.

Intro to DeFi – How to navigate the Degen world


This is a video from Rekt, the dark web of DeFi journalism.


A dystopian view of the new financial world emerging from crypto

Hopium Diaries

It’s time to break up with your bank, and join the movement for sovereign finance.

Bankless


The bi-weekly podcast where our host DeFi Dave talks to industry leaders about everything DeFi and beyond.

The DeFi Scoop

Friday afternoon conversations with Web3 builders. Hosted by @nnnnicholas.

Web3 Galaxy Brain 🌌🧠

It’s a declarative system that simplifies the deployment process, offering an end-to-end deployment experience, and lets developers focus on their projects, not deployment nuances.

Automate Contract Deployment with Hardhat Ignition 

In this Tutorial, We’ll go through the process of building a basic Lending Protocol.

Build Your Own Decentralized Lending Protocol

In this Tutorial, We’ll go through the process of building a basic Decentralized Exchange.

Build your own Decentralized Exchange

Learn how to create an NFT lottery smart contract along with a front-end to let the user buy the tickets.

NFT Lottery DApp

With BuildBear, you can now create Customized Private Omni Testnets by forking the Omni chain at any block number, override gas estimation, allow unlimited contract size, and more. Your Testnets come equipped with a built-in private Faucet and Explorer.

Create Customized Private Omni Testnets

In this tutorial, we will guide you step-by-step in creating royalty NFTs using ERC-2981.

Creating Royalty NFTs using ERC-2981: A Step-by-Step Guide

In this tutorial, you’ll deploy your Royalty Splitter Contract by leveraging BuildBear’s No-Code deployment and learn how it works.

Deploy Your Own Royalty Splitter Contract with BuildBear’s No-Code Deployment

In this tutorial, you'll deploy your unique Azuki ERC721A NFT by leveraging BuildBear's No-Code deployment solution.

Deploy Your Own Azuki ERC721A NFT with BuildBear's No-Code Deployment

We are thrilled to announce that Catapulta has integrated BuildBear Sandbox into their smart contract deployment tool.

Elevate Protocol Development & Testing with Catapulta and BuildBear Sandbox Integration

We’re excited to announce the integration of BuildBear Sandboxes into LokiCode’s DevOps tool! Now, users can create private sandboxes across various blockchain networks directly from LokiCode, enjoying the manifold benefits of BuildBear Sandboxes for optimized Smart Contract Development and Testing

Enhance Your Smart Contract Development with the Integration of LokiCode and BuildBear Sandbox.

Having the right tools at your disposal is crucial for success. Whether you’re a seasoned developer or just dipping your toes into the Web3 space, these powerful tools can streamline your workflow and enhance your productivity. Let’s dive into the essential Web3 development tools that every developer should know about.

Enhance Your Web3 Development with These Essential Tools

In this Tutorial, We’ll go through the Euler Finance’s 196 Million Flash Loan Exploit

Euler Finance’s 196 Million Flash Loan Exploit

The digital landscape is evolving faster than ever, with Web3 leading as the next paradigm shift in the technology space. Web3, or the decentralized web, promises a future where users have greater control over their data, and transactions are more secure and transparent thanks to blockchain technology. If you're aspiring to be at the forefront of this revolution as a Web3 developer, here's a comprehensive guide to set you on your path in 2024.

Guide to Becoming a Web3 Developer in 2024

ERC721-C is a new token standard designed for enforceable on-chain royalties. Unlike ERC-721 and ERC1155, ERC721-C makes royalties programmable and allows creators to prevent zero-fee exchanges from listing their works.

Implementing NFT Royalties A Practical Tutorial on ERC721-C 

ERC4626 is a tokenized vault standard that uses ERC20 tokens to represent ownership shares of another asset.

In-Depth Guide on ERC-4626 Tokenized Vaults

In this article, we are going to be using the latest version UniLend V2. UniLend is currently live on the Sepolia and zkEVM Testnet.

In-Depth Technical QA Dive into UniLendV2 || Reporting a Front-End Bug

Due to the growing popularity of inscriptions, gas prices on the Goerli testnet have surged to over 19,000 GWei. Similar spikes in gas prices have been observed on Sepolia, Optimism Goerli, and Arbitrum Goerli.

Inscription Spam Disrupting Developer Experiences on Public Testnets

Uniswap V4 represents a significant leap forward for the Uniswap protocol, enhancing the capabilities of decentralized exchanges (DEXs) and automated market makers (AMMs) to offer users an unparalleled degree of flexibility, efficiency, and customization.

Integrating Uniswap V4 into Your Smart Contracts: A Step-by-Step Guide

Scaffold-Eth-2 X BuildBear is here, bringing instant Mainnet forking, a convenient Faucet, rapid transactions, an explorer, and pre-built Web3 components to accelerate your dApp development journey.

Introducing Scaffold-ETH-2 with the power of Mainnet Forks

Uniswap was the first protocol to take DEX to the next level with an automated market maker (AMM). The AMM eliminates the need for a peer to make a trade, as is the case with traditional order books in today’s stock market. Instead, the AMM algorithm gathers liquidity deposited by liquidity providers, who place their assets and enable traders to use it.

Learn How to integrate UniswapV3 into your smart contracts.

In this Tutorial, We’ll go through the process of building and deploy an ERC 1155 smart contract.

Learn and deploy an ERC 1155 smart contract

In this tutorial, we’ll delve into the workings of stablecoins, focusing on the example of USDC, and guide you in creating a simplified version with similar features.

Learn how Stablecoins work and Create Your own Version Similar to USDC

In this tutorial, we will be using Scaffold-ETH x BuildBear to interactively showcase how to create a liquidity pool on UniSwapV3 on a fork of the Ethereum Mainnet.

Learn How to Create Liquidity Pools on UniswapV3 for New ERC20 Tokens

In this tutorial, we will be using Scaffold-ETH x BuildBear to interactively showcase how to Perform a Sandwich Attack on UniSwapV2 on a fork of the Ethereum Mainnet.

Learn How to Perform a Sandwich Attack

Testing smart contracts is a crucial aspect of the development process to ensure that the contracts function correctly and are error-free. Hardhat is a development environment for Ethereum applications that offers various tools and libraries to facilitate smart contract testing

Mastering Smart Contract Testing: A Comprehensive Guide to Hardhat

Holesky, Ethereum’s New testnet, is poised to replace the existing Goerli testnet to better cater to the Ethereum developer community’s growing needs.

Meet Holesky: Ethereum’s Latest Testnet. Learn How to 10x Your Dapp Development

This article will walk you through some of the most common vulnerabilities in Solidity, such as Reentrancy, Incorrect Calculations, Oracle Failure/Manipulation, Weak Access Control, and Frontrunning Attacks. Not only that, but we’ll guide you on the solutions and prevention techniques to keep your contracts safe.

Most Common Vulnerabilities In Solidity: In-Depth Part 1

This article will guide you through some of the most common vulnerabilities in Solidity, including Flashloan, overflow and underflow, tx.origin, Insecure Randomness, and Improper Input Validation Attacks.

Most Common Vulnerabilities In Solidity: In-Depth Part 2

Over 1 billion dollars were lost in 2023 due to smart contract vulnerabilities. Web3 security is crucial for blockchain adoption. Using appropriate security tools is essential for identifying vulnerabilities in the Smart Contracts. This article presents a compilation of the most popular and widely utilized tools in Web3 security.

Must Have Smart Contract Auditing Tools for Auditors and Developers

In this tutorial, we’ll explore the process of creating a private test network using Buildbear.io and deploying a smart contract in one click with BuildBear’s Cookbook integration.

No-Code Smart Contract Development and Deployment to Your Private Testnet with Just 1 Click

With Hardhat x BuildBear, you can effortlessly create a Private Testnet sandbox across a variety of blockchain networks, all from your CLI. Your Testnets come with a built-in private Faucet that allows you to mint unlimited Native and ERC20 tokens, and an Explorer with a built-in Tracer.

Optimize Your Dapp Development and Testing with Hardhat x BuildBear

Dyson Finance is a decentralized exchange (DEX) that absorbs the complexity and uncertainty of liquidity provision, enabling anyone to easily become an LP and achieve higher and more predictable returns compared to other DEXs.

In Depth QA Testing Dyson Finance Protocol

Things that you should actually know to code safe protocols.

Re-constructing the GDS Hack

In this Tutorial, We’ll go through the Recreating Kubz NFT Hack.

Recreating Kubz NFT Hack

Catapulta.sh is a powerful smart contract deployment tool designed to streamline your deployment process.

Simplify and Optimize Protocol Deployments with Catapulta

In this tutorial, we will use Scaffold-ETH and BuildBear to provide an interactive demonstration of how Aave v3 operates on a fork of the Ethereum Mainnet.

Understanding the Mechanics of Aave V3

Spark is a decentralized non-custodial liquidity market protocol where users can participate as suppliers or borrowers. 

Unveiling the Power of Spark Protocol: A Comprehensive Review

Following the Shanghai upgrade in April 2023 which allowed you to finally unlock your staked ETH, Dencun arrives with exciting changes.

What Is the Ethereum Cancun-Deneb (Dencun) Update?


If you want maximum arbitrage performance, you need to swap tokens between exchanges in a single transaction. Or maybe you just want to save gas on certain swaps you perform regularly. Or maybe you have your own custom use case for swapping between decentralized exchanges. And of course maybe you are just here for the learning aspect.

How to better arbitrage with Solidity by making multiple swaps across different decentralized exchanges in a single transaction

Advanced MultiSwap

“A zero-knowledge proof is a method by which one party (the prover) can prove to another party (the verifier) that something is true, without revealing any information apart from the fact that this specific statement is true.”

Demystifying Zero-Knowledge Proofs: A Practical Guide with Illustrative Examples

ERC-7201 is a standard for grouping storage variables together by a common identifier called a namespace and to document the group via NatSpec.

ERC-7201 Storage Namespaces Explained


One of the most significant smart contract standard on Ethereum is known as ERC-20, which has emerged as the technical standard used for all smart contracts on the Ethereum blockchain for fungible token implementations.

The ERC-20 defines a common list of rules that all Ethereum tokens must adhere to. Consequently, this token standard empowers developers of all types to accurately predict how new tokens will function within the larger Ethereum system. This simplifies and eases developers’ tasks, because they can proceed with their work, knowing that each and every new project won’t need to be redone every time a new token is released, as long as the token follows the rules.

Understand the ERC20 token smart contract

ERC20 token standard

A Comprehensive Guide for Testing with Hardhat

Forking Ethereum Mainnet

Learn to Deploy an NFT smart contract, Generate NFT with AI and Build a full front End App

Generate NFT with AI and Deploy the NFT smart contract, and the Front End App


This is an example for high-speed EVM blockchain event reading in Python. The example shows How to read Solidity events, or use eth_getLogs RPC, to maximize output.

Solidity event high-speed multithread reading

In Solidity versions 0.8 and above, overflow and underflow checking is enabled by default. However, this checking does not apply to conversions between integer types, including data-type conversions.

Integer Downcasting Vulnerability: Demonstration and Effective Fix

In this Tutorial, We’ll go through the process of building a basic MultiSig Wallet.

Learn, code and deploy your own MultiSig Wallet and test it with your friends now

In this Tutorial, We’ll go through the process of building a basic Decentralised Hotel Booking System.

Learn how to Code a Decentralised Hotel Booking System Smart Contract


Imagine the following scenario: you just found a critical vulnerability that allows funds in a smart contract to be drained. The exploit, however, is complicated and requires multiple payload parameters to be set correctly for it to be effective or even profitable at all.

It quickly turns out that calculating optimal parameters by hand is infeasible, due to the complex nature of the exploit. And yet, you want to responsibly disclose a Proof of Concept (PoC) that maximizes the amount of funds that can be drained from the contract. Why? Because it’s often true that the greater the funds at risk, the higher the bug bounty reward.

In such a situation, linear programming can be an exceptionally helpful tool. This is an advanced tutorial for whitehats who are looking to take their hacking skills to the next level.

How to Get a Bigger Bounty by Optimizing Attack Parameters

Optimizing Attack Parameters


Basically, there are two types of users: liquidity providers and traders.

The liquidity providers provide the pool with the two tokens that can be exchanged (we'll call them Token0 and Token1). In return, they receive a third token that represents partial ownership of the pool called a liquidity token.

Traders send one type of token to the pool and receive the other (for example, send Token0 and receive Token1) out of the pool provided by the liquidity providers. The exchange rate is determined by the relative number of Token0s and Token1s that the pool has. In addition, the pool takes a small percent as a reward for the liquidity pool.

When liquidity providers want their assets back they can burn the pool tokens and receive back their tokens, including their share of the rewards.

Uniswap v2 can create an exchange market between any two ERC-20 tokens. In this article we will go over the source code for the contracts that implement this protocol.

Uniswap v2 Code walk-through


Here’s what we’ll accomplish:

- Set up a basic, reusable development environment to build and test smart contracts that interact with the Uniswap Protocol
- Run a local development Ethereum node forked from Mainnet that includes the full Uniswap Protocol
- Write a basic smart contract that executes a swap on Uniswap V3
- Deploy and test that contract


Developers who are new to the Uniswap ecosystem often get stuck in the first stages of developing on-chain integrations with the Protocol. In this post, we’re going to help you get over those first hurdles.

Building Your First Uniswap Integration


a16z Crypto Startup School is a series of lectures and discussions given by experts to help technologists learn how to build crypto companies.

a16z Crypto Startup School


Article: https://blog.chain.link/blockchain-fintech-defi-tutorial-lending-borrowing-python/
Code: https://github.com/PatrickAlphaC/aave_brownie_py


Learn how to put down collateral, borrow, lend, and short sell assets in the defi realm. A MUCH easier experience for anyone looking to create financial instruments. 

Become a DEFI QUANT | Python, Chainlink, and Aave


In this intermediate solidity tutorial I'll be building on the lego bricks of DeFi using Solidity and Hardhat. I'll be looking at how to interact with external contracts such as chainlink oracles and how to carry out swaps/trades on Uniswap v3. Then we will look at testing and deploying the contracts to the Ethereum kovan testnet.

There is more deatails and a full tutorial at https://jamesbachini.com/intermediate-solidity-tutorial/

The code from this tutorial is open-sourced at: https://github.com/jamesbachini/myVault/

00:00 Solidity Tutorial Intro
00:34 Hardhat & Dev Environment
02:38 Solidity Code
017:59 Hardhat Testing
21:33 Solidity Security
24:52 Hardhat Deployment
29:58 Conclusion

In this intermediate solidity tutorial I'll be building on the lego bricks of DeFi using Solidity and Hardhat.

Building On DeFi With Solidity & Hardhat


DeFi is one of the most interesting and fastest growing movements with an amazing potential of completely disrupting traditional finance. Although I believe DeFi is the future, it can be quite difficult for newcomers as it combines a lot of elements from two poorly understood subjects: finance and technology. I started Finematics to make it easier to understand this new, fascinating world.

Educational videos on DeFi (Decentralized Finance).

Finematics


Here we collect and discuss the best DeFi & Blockchain researches and tools 

DeFi Developer roadmap


Dissecting DeFi Protocols analyzes smart contracts of different DeFi protocols.

My newsletter explains how DeFi protocols work as smart contracts

Dissecting DeFi Protocols


Growthepie provides comprehensive and accurate analytics on Ethereum scaling solutions, acting as a trusted data aggregator from reliable sources such as L2Beat and DefiLlama, while also developing their own metrics.


Mastering Ethereum Layer 2s - Your Gateway to Curated Analytics and Knowledge.

#defi

🎓 Cyfrin Updraft

🌐 DeFi Developer roadmap

Newsletter