INTERMEDIATE
The attacker's playbook and the auditor's methodology — reentrancy, oracle manipulation, access control failures, signature exploits, and governance attacks. Develop the threat-modelling mindset to read, audit, and harden production smart contracts.
Why smart contracts get hacked, how exploit developers think, and how to read the historical hack record to extract reusable security intuitions.
Classic and advanced reentrancy — single-function, cross-function, cross-contract, and read-only — with the full toolbox of defences including checks-effects-interactions and transient storage.
Integer overflow and underflow, precision loss from integer division, and price oracle manipulation — the numerical attack surface that has drained billions from DeFi protocols.
Missing access controls, initializer vulnerabilities, tx.origin confusion, signature replay attacks, and governance flash-loan exploits — the authentication failures behind the largest DeFi hacks.
The professional auditor's workflow — scope, threat modelling, manual review, automated tooling, and a capstone challenge to audit and fix a deliberately vulnerable DeFi protocol.
