Advanced Web3 Security Course: Every Chapter
Quick answer. The Advanced Web3 Security Course is a free, two-part web3 security course on YouTube, about 23 hours long. It covers design, testing, attack classes, DeFi protocols, live audits, the EVM, fuzzing and formal verification.
The Advanced Web3 Security Course was published free on YouTube in two parts, in October and November 2023. Each part is a single video of 11 to 12 hours.
Both videos are split into named chapters. This page lists every chapter with its start time, so you can jump straight to the topic you need.
Where the Resource Hub has an article on the same topic, the tables link to it.
The Course at a Glance
| Part | Published | Length | Chapters |
|---|---|---|---|
| Part 1 | October 22, 2023 | 11 h 20 min | 17, plus an intro and outro |
| Part 2 | November 5, 2023 | 11 h 57 min | 17, plus an intro |
What the Course Covers
Grouped by theme, the chapter titles fall into five areas:
- Design and testing: principles of smart contract design, principles of smart contract testing, a fuzzing masterclass and an introduction to formal verification.
- Attack classes: external call safety, reentrancy, frontrunning, sandwich attacks, rounding issues, signature malleability, upgradeability vulnerabilities, ERC-4626 inflation attacks and oracle manipulation.
- DeFi protocols: two chapters on perpetuals, a complete guide to AMMs and a Uniswap V3 deep dive.
- Low-level Ethereum: the EVM, memory, Yul, calldata, Ethereum cryptography and upgrade patterns.
- Auditing practice: writing finding reports, a live audit session, code walks, student code walks, a first security review, a findings deep dive, mob auditing and approaching the marketplace.
Each chapter title in the tables below opens the video at that chapter.
Part 1 Chapters
Part 1 opens with a course overview and the principles of design and testing. It ends with four chapters on the EVM, memory, Yul and calldata.
The testing principles chapter uses an Echidna harness, which is published in Guardian's limit-pocs repository. Echidna is a smart contract fuzzer.
Part 2 Chapters
Part 2 opens with a first security review and a deep dive into important findings. It closes with fuzzing, formal verification and approaching the marketplace.
Learning at Guardian
Knowledge for all is one of Guardian's core values: the team shares smart contract security knowledge for the good of the community and of the team.
Guardian also hires full-time security researchers. If you want to put the course to work, see the open roles on Guardian's careers page.
Frequently Asked Questions
Is the Advanced Web3 Security Course free?
Yes. Both parts are free to watch on YouTube. Part 1 was published on October 22, 2023 and Part 2 on November 5, 2023.
How long is the web3 security course?
About 23 hours in total. Part 1 runs 11 hours 20 minutes and Part 2 runs 11 hours 57 minutes, each as a single video split into chapters.
Which chapters cover low-level Ethereum?
The last four chapters of Part 1: EVM Intro, Memory Guide, Yul Masterclass and Calldata Masterclass. Part 2 adds Ethereum Cryptography and an Upgrade Patterns Guide.
Does the course include live auditing?
Yes. Part 1 has Live Audit Session #1 and Code Walks. Part 2 has Your First Security Review, Student Code Walks and Mob Auditing.
Sources
Turn course hours into audit skill
Guardian researchers review the code that holds the money, in three passes from design to manual audit.