Continuing Education and Resources
Smart contract security is a field where the threat model rewrites itself every few months. A practitioner who stops learning becomes obsolete quickly; one who maintains active engagement with the community, the tooling, and the public record of findings stays sharp. This section catalogs the resources that actively practicing auditors return to.
How This Section Is Organized
The four sub-pages below progress from formal training to community engagement to standing reference material:
- Auditing Courses — free and paid courses, bootcamps, and cohort programs, with a suggested learning path.
- Certifications — an honest survey of the certification landscape, including which credentials carry weight and which are largely commercial.
- Online Channels, Communities, and Forums — Discords, X / Farcaster accounts, newsletters, podcasts, and CTF communities where the real-time conversation happens.
- More Resources — indexed finding databases (Solodit, Rekt, SWC), reference standards (EIPs, EthTrust), books, playgrounds, tooling repositories, on-chain forensics, and contract libraries.
A Working Philosophy
A few principles run through every page in this section:
- Public work outweighs credentials. Contest leaderboards, published findings, and open-source contributions are the dominant hiring signals. Certifications are at best supplementary.
- Read other people's findings constantly. Solodit, Rekt postmortems, and public contest reports are the highest-density learning material available. Schedule time for them the way a developer schedules time for engineering blogs.
- Reproduce exploits, don't just read about them. DeFiHackLabs and similar repositories let you replay real exploits in Foundry. The understanding that comes from running the attack is substantially deeper than the understanding from reading a writeup.
- Maintain a personal reference library. A growing markdown notes repo organized by vulnerability class, with minimal PoCs you've written yourself, compounds over time into the single most valuable artifact in your toolkit.
- Show up in public, consistently. Contests, writeups, Discord discussions, X threads. Communities reward presence; opportunities flow to practitioners who are visible and reliable.
When to Use This Section
For someone new to the field, start with Auditing Courses and follow the suggested learning path; supplement with the CTFs and playgrounds in More Resources. For someone established, the most valuable pages tend to be Online Channels for staying current and More Resources as a daily reference.
The space changes quickly enough that any of these pages may go stale between editions. Treat them as starting points, and verify current details on each provider's site before committing time or money.