Cyfrin saw significant growth in 2024 doubling the team, securing over $10b in blockchain assets, and educating 200k+ students on smart contract development.

Cyfrin’s guide to the best Solidity gas optimization techniques for Base and other L2 Chains. Reduce cost with advanced, real-world, and tested strategies.

A sophisticated supply chain attack has compromized versions 1.95.6 and v1.95.7 of the widely-used @solana/web3.js JavaScript library.

Learn how account abstraction makes crypto safer and easier to use. It adds security features and removes technical barriers to blockchain adoption.

Learn what blockchain interoperability is and why it matters. Discover how leading protocols combine its core components to deliver value across industries.

Discover Uniswap V4 architectural updates and technical innovations: new hook system, singleton pattern, flash accounting, fee tier flexibility, native token support.

Introducing Cyfrin Profiles, a unique, personal account delivering a unified experience across the Cyfrin ecosystem.

Explore 7 tips to transition from traditional cybersecurity into blockchain security research. Get tips for navigating the industry and maximizing your opportunity.

Blockchain unconfirmed transactions are transactions sent to the blockchain network but not yet included in a block.

Aderyn's Language Server elevates Solidity developers' experience by providing real-time security diagnostics and coding best practices in any code editor.

Flash loans are unique financial products, only available in DeFi. This blog post will teach you what a flash loan is, how it works, and what it can be used for.

Fraud proofs and validity proofs are both used by rollups to check the validity of transactions. Delve into their differences, functions, and advantages and disadvantages

What are zk-SNARKs and what are zk-STARKs? They're both zero-knowledge proofs but what are their features and how do they compare to each other.

Explore ZK and Succinct rollups. Answer the questions: what are ZK rollups, how do they work, and why are they considered the future of Ethereum scaling?

What is a zero-knowledge proof (ZKP) and how do they work? Explore ZKPs, survey mathematical ZKPs, and understand what programmers need to know to implement them.

Top 10 Solidity interview questions to help you prepare for your next Solidity technical initerview. Join your dream team as a smart contract developer!

Discover how to prepare for a Web3 hackathon—from selecting the right event to building a team and managing deadlines—to boost your skills and maximize your fun.

Learn what a crypto honeypot is, how these scams trap unsuspecting investors, and discover strategies to identify and avoid them. Stay safe in crypto.

Build your Solidity developer portfolio with 5 beginner projects, including crypto lotteries and DAOs. Master smart contracts and excel in the Web3 job market.

Cyfrin supports Soneium as ecosystem security partner for their public blockchain ecosystem. Read more about the collaboration and what it means for security.

Build dApps faster with Web3 tools like Chainlink, Alchemy, and Thirdweb. Use pre-built components and trusted resources for secure, scalable projects.

Learn what Soulbound Tokens (SBTs) are, their differences from NFTs, and explore use cases like digital identity and certifications with insights into ERC-5114 and ERC-54

Learn to implement Permit2, the token approval system compatible with all ERC-20 tokens that streamlines user experience and reduces their economic burden.

Cyfrin and PwC Partner To Strengthen Blockchain Security And Scale Adoption of Blockchain Technology.

Solidity is a high-level Programming Language for writing Smart Contracts on Ethereum and most EVM-compatible blockchains. Learn more in Cyfrin's deep dive.

Cyfrin's Iintroduction to Ethereum improvement proposals (EIPs). A guide to understanding what they are, how they work, and their importance to the Ethereum ecosystem.

Deep dive into a Merkle Tree's data structure and how Merkle proofs prove data is there. Answer the question: What is a Merkle Tree, Merkle Proof, and Merkle Root?

Blockchain technology opens new avenues of commerce and asset ownership. It also comes with a lot of hype. What are the real use cases for blockchain technology?

Introducing Hooks into DEX Liquidity Pools ushers in a new era of customization. Discover how they add functionality, reduce risk, and increase potential rewards.

Learn about Distributed Validator Technology (DVT) and how it can increase the Ethereum's decentralization, make staking more appealing, and increase network security.

A completely redesigned competitive smart contract security audit platform with new features and functionality, improved processes, and industry-leading usability.

Learn where the EVM can read and write data, what calldata, memory, and storage are, and the best practices to know when writing your solidity or Vyper smart contracts

The beacon chain is a fundamental component of Ethereum 2.0, designed to enhance scalability, security, and efficiency by transitioning from a proof of work (PoW) to a pr

Tokenized RWAs are real-world assets represented as tokens on the blockchain. Learn what crypto RWAs means, how they work and the list of projects to keep an eye on.

What is the EIP-4844? Learn what proto-danksharding and blobs are, how they work, and how to send your first blob transaction using the new Ethereum improvement proposal

In this guide, we explore what are the differences between Proof of Work (PoW) and. Proof of Stake (PoS), two Sybil resistance mechanisms used in blockchain networks.

What are crypto blockchain rollups? Learn everything you need to know about optimistic and zero-knowledge based rollups, how they work, and their differences.

Cyfrin supports projects and developers on zkSync in accessing high-quality public and private audits as well as top-notch smart contract development and security courses

An L1, or Layer 1 blockchain, refers to the base layer of a blockchain ecosystem. Learn everything you need to know about what are layer 1 blockchains and how they work.

Front-running in crypto or Blockchain occurs when someone intentionally enters a transaction into a block before you to try to extract some value.

Learn the intricacies of blockchain architectures like Ethereum and Bitcoin, broken down into easy-to-understand pieces. From functional layers to layers 1 and 2.

Open-sourced Rust-based Smart Contract static analyzer designed to help protocol engineers and security researchers find vulnerabilities in Solidity code bases

The ABI of a smart contract is an acronym for the “Application Binary Interface.” It defines the standard way to interact with contracts in the Ethereum ecosystem;

What is an Ethereum blockchain testnet? Learn everything you need to know about crypto testnets, faucets and how blockchain test networks work in this comprehensive guide

Learn how to console log variables in Solidity smart contracts using Foundry and Hardhat and debug your smart contracts without using events.

Learn what is a blockchain mempool on Ethereum and Bitcoin, how it works and what private mempools are.

A crypto Hardware Wallet is a physical device that Securely Stores private cryptographic keys offline. Learn More in Cyfrin's Full Guide to hardware wallets.

A cold storage crypto wallet is a type that isn’t connected to the internet and is less likely to be exposed to online threats like malware or phishing attacks.

What is a Reentrancy Attack in Solidity smart contracts? Learn how blockchain reentrancy attacks work and how to protect your smart contracts from them.

The best smart contract development courses, boot camps, certifications, and resources to learn Solidity development from scratch and kickstart your career for free.

Cyfrin has formed an alliance with Chainlink Labs to provide Chainlink BUILD and SCALE projects with industry-leading security

Top smart contract auditing and security courses to become a smart contract auditor or level up your web3 development career

In this article, we will go through 10 key steps to systematically approach a smart contract audit, independently of code size or complexity, as security researchers.

On March 5th 2024, WOOFi’s synthetic proactive market making (sPMM) algorithm that controls the pricing of WOOFi Swaps was exploited on Arbitrum for $8.6M. Here's how.

Seneca Protocol is a decentralized finance product which was exploited for $6million. Here is how it happened, a proof of concept, and how to mitigate it.

We’ve tested and found the best smart contract auditing and security tools every web3 smart contract developer should include in their stack. 

Sybil attacks undermine the integrity and security of blockchain networks. This article explores what is Sybil resistance, its consequences, and mitigations.

EIP 3664 extends NFT standards to enable customizable, interoperable, and evolvable NFT attributes. You'll learn how to use it, how it works, and its ecosystem impact.

In this article, we explore how blockchain double spending attacks occur, with examples and ways to mitigate and avoid them.

Euler Finance was hacked for ~$200M due to a missing check on the liquidity status. We explore a step by step of how this attack happened, including a proof of concept.

White hatting a protocol means exploiting a vulnerability in a smart contract to save funds, rather than steal them.

Learn how to write Solidity smart contract fuzz tests (fuzzing) using the Foundry framework. Write tests, use prank addresses, and execute them using forge.

Proxy Smart Contracts patterns are a simple and effective way to create upgradable smart contracts to keep your protocol up to date.

The Elliptic Curve Digital Signature Algorithm (ECDSA) is based on Elliptic Curve Cryptography (ECC) and is used to generate keys, authenticate, sign, and verify messages

Learn everything you need to know about the (Ethereum improvement proposal) EIP91, EIP712, and Ethereum signature standards.

Learn what a blockchain replay attack is how it works through 5 common examples.

Learn everything you need to know about Blockchain multichain bridges, how they work, and why they're useful for

A Smart Contract Security Audit is a time-boxed, Security-based code review of a Smart Contract or Protocol to enhance Security and identify vulnerabilities.

Smart contracts have been tested and audited, but are they truly bulletproof? When you think your code is secure, an attacker might exploit a vulnerability that you

We look at formal verification & symbolic execution with two Trail of Bits Web3 security team members. Additionally, we review the value these techniques bring and compar

Today, we are excited to announce that we have taken a significant step towards achieving this goal by acquiring Solodit, a powerful tool committed to...

If you want to debug your code using AI, this is the place to learn the 7 steps to debug anything using AI-assisted code debugging, broken down in 7 easy steps.

In this tutorial, you will learn several techniques for querying and retrieving all transactions from a contract address.

There are many smart contract auditing companies and services that can provide the best solutions for your audit. Find the best smart contract security auditors this year

With an average of $105k per year, smart contract auditor salaries range between $33k and $200k, recently rising as blockchain protocols demand more security,

The full blockchain developer roadmap to bring you from beginner to advanced with the world's top courses and smart contract development resources- completely free.

Competitive vs private audits? In this guide, you will learn when and how to decide which smart contract security audit type is the best for your protocols.

In this guide on the best Solidity gas optimization techniques, you will learn 11 advanced, real-world, and tested strategies

The safest ways to store crypto and the best web3 wallet depend on where you are in your web3 journey. In this guide, you'll learn how to find it out.

Top tested industry-leading web3 development tools for blockchain and smart contract developers to help you speed up your workflows and allow you to code.

Learn how to become a smart contract auditor (security researcher) and kickstart your career from this full roadmap with the best resources and courses in web3

Learn how to develop web3 with this step-by-step roadmap and free courses. Learn smart contracts development and kickstart your blockchain career.

What is fuzz testing? In this guide, you will learn everything you need to know about smart contracts fuzzing and invariants testing using foundry.

A deep dive into price oracle manipulation attacks, learn everything you need in this full guide with examples.