Heavyw8t's Security Academy

Welcome to Heavyw8t's Security Academy! This is a free, non-commercial project I'm building over the coming months. It's here to help devs, auditors and bug hunters learn the basics of different web3 protocol "archetypes", use AI effectively in their workflows, write more secure code, and catch "easy" bugs and exploits quickly using checklists.

If you are just starting out in web3, want to transition to a new type of protocol or ecosystem, or are already quite experienced but want to know more about a specific niche or just how to write more secure code, this is the right place for you.

Currently the resources available here are still limited, so let's call it early access. I will keep adding new lessons and checklists, so the academy will grow a lot over the coming months. I hope this helps you on your journey. If you have feedback or requests for new lessons, let me know on X!

Hi, I'm heavyw8t. I came to smart contract security from neuroscience and data science, and these days I spend most of my time reading DeFi code in Solidity and Rust. I audit for Oak Security and SB Security, and also through Zenith or directly for private clients. Outside audits, I compete in public contests, lead judging at Cantina and triage at Zenith.

Judging and triaging taught me a lot about where new auditors get stuck. Most of the time they don't yet know how the protocol underneath is supposed to work, so they can't tell a bug from a design choice. I wrote these lessons to help with that part.

If you have a question or spot a mistake, message me on X. My audit and contest history is on my home page.