AuditorsRoadmap

Available at: Ethereum Smart Contract Auditor Roadmap

PDF: Smart_Contract_Auditor_PDF.pdf

Step by Step Approach

1) Blockchain Fundamentals

Mastering Ethereum
Proof of Work vs. Proof of Stake
The Eth2 Book

2) Solidity Fundamentals

3) Gas Optimizations

4) Smart Contract Testing/Debugging

5) ERC Standards

Token Standards - ERC 20, 721, 777, 1155, 4626
Other Standards: ERC2981

6) Openzeppelin Helper Libraries/Contracts

7) Upgradeable Contracts

8) Smart Contract Attack Vectors

9) Yul

10) CTFs

11) DeFi Deep Dive

Finematics - DeFi
DeFi MOOC
Smart Contract Programmer - DeFi
Protocol Deep Dives: Uniswap v2/v3/v4, Compound, Curve, Aave, Balancer, Gearbox
Stablecoins => Algorithmic Stablecoins
Staking Rewards, Vaults

12) DeFi Attack Vectors

Flash Loan => Price Oracle Manipulation
Front-Running => Sandwich attacks
Rug Pulls => Unlimited Token Allowance

13) Postmortems & BugFixes

14) Report Reading

Secureum Audit Findings 101
Secureum Audit Findings 201
Consensys, Trail of Bits, Openzeppelin, Code4rena, Sherlock, QuillAudits
Database: Solodit

15) Security Standards & Checklists

16) Important Ethereum Improvement Proposals (EIPs)

Core: 150, 1559, 2929, 2930, 3198, 3529, 3675, 4399, 1153, 4758
Interface: 712
ERC: 165, 1167, 1271, 2535, 2612, 2771, 2981, 4337, 4626
Meta: All

17) Arsenal

18) Continuous Learning and Research

Ethereum Magicians
Ethereum Yellow Paper
Eth Research
Newsletters: Blockthreat
Ethereum Execution Specs
Ethereum Consensus Specs
Join Security Communities on Discord: Immunefi, Secureum, Blockchain Pentesting, Eth Security, Eth R&D
Deep Dive Research Papers: Arxiv
Be Active on Twitter & follow up with latest research, and attack vectors