MAYA: Addressing Inconsistencies in Generative Password Guessing through a Unified Benchmark (2025) arxiv.org

PassGPT: Password Modeling and (Guided) Generation with LLMs arxiv.org

PassFlow: Guessing Passwords with Generative Flows (2021) arxiv.org

Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries (2020) arxiv.org

Mangling Rules Generation With Density-Based Clustering for Password Guessing (2023) annas-archive.pk

PGTCN: A Novel Password-Guessing Model Based On Temporal Convolution Network (2023) annas-archive.pk

Hash Crack: Password Cracking Manual (v3) amazon.com

Password Cracking Manual v3 is an expanded reference guide for password recovery (cracking) methods, tools, and analysis techniques.

Videos to watch on YouTube youtube.com

YouTube playlist of web3 security videos.

WTF Is QF wtfisqf.com

A simple explanation of quadratic funding.

People to follow on Twitter twitter.com

Twitter list to an overview of the web3 ecosystem and security people.

The Wyoming DAO bill twitter.com

A thread about Wyoming DAOs .

Ethereum EVM illustrated takenobu-hs.github.io

Exploring some mental models and implementations.

SWC Registry swcregistry.io

Smart Contract Weakness Classification and Test Cases.

Smart Contract Security Verification Standard securing.github.io

A free 14-part checklist created to standardize the security of smart contracts for developers, architects, security reviewers and vendors.

SAFT Agreements saftproject.com

A commercial instrument used to convey rights in tokens prior to the development of the tokens' functionality.

Rekt News rekt.news

Investigative journalism, creative commentary, and incident analysis.

The Non-Fungible Token Bible opensea.io

Everything you need to know about NFTs.

Shelling Out: The Origins of Money nakamotoinstitute.org

Illustrates the value of collectibles in reducing social transaction costs.

Mudit Gupta's Twitter threads mudit.blog

Early analysis and educational content on Twitter.

Flashloan monitor monitor.blocksecteam.com

Dashboard that helps you monitor flashloan transactions.

DAOs, Democracy and Governance merkle.com

A paper by Ralph Merkle about DAOs.

It Takes a Cryptonetwork medium.com

Prime's Strategy for DAO to DAO Relations.

Voting Options in DAOs medium.com

Voting Options in DAOs.

State of DeFi Audits medium.com

Article taking a look at the auditing space and its importance in onboarding users by properly securing new DeFi protocols.

A Crash Course in Mechanism Design for Cryptoeconomic Applications medium.com

Introduces the basic concepts of mechanism design, and gives a taste for their usefulness in the cryptocurrency world.

Blockchain Graveyard magoo.github.io

A list of all massive security breaches or thefts involving blockchains.

A beginner's guide to DAOs linda.mirror.xyz

Gives a high level overview of what DAOs are, why they are interesting and some of their use cases.

Ethereum 2.0 Specifications Security Audit Report leastauthority.com

Security Audit Report of the Eth2.0 spec by Least Authority.

L2Beat l2beat.com

Transparent and verifiable insights into emerging layer two (L2) technologies.

IVSCS immunefi.com

Immunefi Vulnerability Severity Classification System.

Flash Boys 2.0 Paper ieeexplore.ieee.org

Frontrunning in Decentralized Exchanges, Miner Extractable Value, and Consensus Instability.

Getting Deep Into EVM hackernoon.com

An Ultimate, In-depth Explanation of How EVM Works.

Secureth guidelines guidelines.secureth.org

Aid you in formulating your own software engineering process by giving a complete picture of all the different concerns and expectations in your software projects.

List of Security Vulnerabilities github.com

A comprehensive list of common smart contract security vulnerabilities, compiled from various sources.

Solidity Patterns fravoll.github.io

A compilation of patterns and best practices for the smart contract programming language Solidity.

MEV-explore explore.flashbots.net

Help the community understand and quantify the significance of "Dark Forest activities" and their impact on the Ethereum network.

Foundations of Cryptoeconomic Systems epub.wu.ac.at

This paper explores why the term "cryptoeconomics" is context dependent and proposes complementary micro, meso and macro definitions of the term.

Security Considerations in the Solidity documentation docs.soliditylang.org

Lists some pitfalls and general security recommendations.

List of Known Bugs docs.soliditylang.org

A JSON-formatted list of some of the known security-relevant bugs in the Solidity compiler.

Security Pattern for Ethereum and Solidity docs.google.com

Google Sheets Checklists.

Gnosis Safe docs.gnosis-safe.io

Multi-sig. Require multiple team members to confirm every transaction in order to execute it, which helps prevent unauthorized access to company crypto.

Forta docs.forta.network

Community-based runtime security network for smart contracts.

Simplified Roadmap for Blockchain Security devansh.xyz

Covers all rudimentary topics that one needs to know in order to get into the field of Blockchain Security.

DeFiYield's REKT db defiyield.app

Database of Crypto Hacks, Exploit, Scam.

List of DeFi auditors defisafety.com

List of DeFi auditors maintained by DeFiSafety.

DeFi Safety defisafety.com

Best practices security score reviews.

Deep DAO deepdao.io

Lists, ranks and analyzes top DAOs across multiple metrics.

DASP Top 10 of 2018 dasp.co

Decentralized Application Security Project Top 10 vulnerabilities.

CryptoSec.info cryptosec.info

Information to help beginners learn how to protect their funds against hackers and scammers.

CryptoScamDB cryptoscamdb.org

Keeping track of cryptocurrency scams in an open-source database.