An updated (by 2024) roadmap to help you become a successful Web3 security researcher with Solidity
- Read the Mastering Ethereum book.
- Complete all of the courses on Cyfrin Updraft.
- Watch the Hack Solidity playlist by Smart Contract Programmer.
- Watch Owen Thurm on YouTube - (Web3 Security 101 playlist and then Advanced Web3 Security Course Part 1 & Part 2).
- Exercise most common smart contract vulnerabilities using Foundry with the DeFiVulnLabs repository.
- Do shadow audits on these past contests - BeedleFi, Asymmetry, Curves, Revolution Protocol and also you can participate in First Flights.
- Learn bugs while reading reports from previous audits in Solodit.
Now you should be ready and well-prepared to participate in live contests on audit platforms like Code4rena, Sherlock, CodeHawks, Cantina, HatsFinance and Immunefi. Before participating in a public contest, be sure to read the documentation of the audit platform that organizes it!