Blockchain & Smart Contract Security: Audit Solidity Code

Smart contracts hold real money, run in public, and cannot be patched the way ordinary software can. When they fail, the losses are immediate and permanent. This course teaches you to find those failures before an attacker does, and to fix them. You will start with the fundamentals an auditor actually needs: how the EVM executes code, how contracts store state and move value, and how to build a local audit lab with Foundry and Anvil. From there you will work through the vulnerability classes themselves, using the OWASP Smart Contract Top 10 (2025) as the spine. Reentrancy in its single-function, cross-function and read-only forms. Access control failures, the largest single loss category. Price oracle manipulation and flash loan attacks. Logic and accounting errors, rounding and precision loss, front-running and MEV, denial of service, insecure randomness, and the proxy and upgradeability bugs that keep appearing in production. Every class is taught the same way: understand the mechanism, exploit a small vulnerable contract in your own local sandbox, then fix it and prove the fix holds. All work is defensive and stays on contracts you control. You will then build a real audit workflow. Static analysis with Slither, symbolic execution with Mythril, property and invariant testing with Echidna and Foundry, and formal verification with Certora and the SMTChecker. You will also learn where these tools stop helping, and why manual review and well-designed invariants remain the core of the job. The course closes with the professional side of auditing: scoping an engagement, reading code for intent, rating severity by impact and likelihood, writing findings with working proof-of-concept exploits, and delivering a report a client can act on. Twelve downloadable templates, checklists and worksheets come with the course, including an audit report template, a manual review checklist, and a s…