Web3Exploit logoWeb3Exploit
Learn

Case-driven Web3 security.

Concepts taught through the exploits we document. Every page links back to the real cases, checklist items, and tools that make it concrete.

7
Attack patterns
14
Checklist items
13
Glossary terms
Featured pattern
Oracle Manipulation

A protocol prices assets off a manipulable source (spot AMM reserves or desynced internal state), letting an attacker forge a favorable price.

Start here

Attack Patterns
Vulnerability-class explainers taught through real, documented incidents: root cause, vulnerable vs. fixed code, and a defensive checklist.
Solidity Security Checklist
A referenceable, ID'd checklist grouped by category. Each item links to its explainer and a matching case.
Security Glossary
Plain-language definitions of Web3 security terms, cross-linked to patterns, cases, and tools.

Coming next

Smart Contract Security Track
A curated, ordered reading path across the attack patterns and checklist — a lightweight course without the LMS overhead.
Planned
Local Fork Testing
Reproduce a documented exploit end-to-end on a Foundry/anvil mainnet fork.
Planned
Audit Report Templates
Report scaffolds, a severity framework, and a worked example derived from a real case.
Planned
Bug Bounty Guide
Write a runnable, fork-based PoC and navigate the submission workflow.
Planned