Web3 & Smart Contract Security

About this course

Deployed smart contracts usually cannot be patched, so a single bug can leak funds forever, which is why auditing matters. This course teaches smart contract security on a local chain you run with Foundry and anvil, never real value. You start with the blockchain, the EVM and gas, then Solidity basics, before diving into the classic reentrancy bug: you deploy a vulnerable bank and an attacker contract yourself, watch the drain happen on your own chain, and fix it with checks-effects-interactions and a guard. Further lessons cover broken access control, arithmetic and logic errors, and price-oracle manipulation funded by flash loans, plus static analysis with Slither. You finish with an auditing workflow and a professional, severity-rated report written entirely against testnet or your own contracts.