A curated list of Cosmos ecosystem links, focusing on the security aspect of it
Here's a link to two lists for "awesome Cosmos" - both of them are great, however they are focused on the Cosmos as a whole, and not on security per se:
- Go (golang)
- Tutorials
- Interesting repos
- Firms performing Cosmos security reviews
- Security tutorials
- Security writeups
- Audits
- https://gobyexample.com/ - Go by example
- https://golang50shades.com/ - GOtchas (LOL), golang traps
- https://github.com/code-423n4/alpha-zetachain/blob/main/032/101-dev.md - Cosmos specific Go traps
- https://tutorials.cosmos.network/
- https://blog.cosmos.network/demystifying-ethermint-de80f7992524
- https://blog.cosmos.network/a-beginners-guide-to-ethermint-38ee15f8a6f4
- https://hub.cosmos.network/main/hub-overview/overview.html
- https://youtube.com/@CosmWasmDev?si=HmXWGUkRes_Z8Puz
- building Cosmos chain tutorial: https://ida.interchain.io/ida-course/LPs/week-0/
- https://docs.cosmos.network/v0.47/core/baseapp#state-updates
- https://github.com/cosmos/gaia/blob/main/docs/gtm-interchain.md
- https://zkvalidator.com/shared-security-in-cosmos/
- https://academy.truts.xyz/resource/chain/Cosmos
- https://cosmos-network.gitbooks.io/cosmos-academy/content/cosmos-for-developers/cosmos-sdk.html
- https://forum.polkadot.network/t/what-are-some-differences-between-substrate-and-cosmos-sdk/1354
- https://www.reddit.com/r/cosmosnetwork/comments/10smm2v/cosmos_vs_competitors_security_and_development/
- https://moneymade.io/learn/article/polkadot-vs-cosmos
- https://www.galaxy.com/research/whitepapers/exploring-the-cosmos/
- https://docs.ethermint.zone/
- https://youtube.com/@interchain_io
- https://www.youtube.com/watch?v=cH-4Mq-S4BA - building with Ethermint
- https://www.youtube.com/watch?v=VCLbS1Oks8A - etheremint v2
- https://www.youtube.com/watch?v=Rws-QQ_qcfU - getting started with Ethermint
- https://github.com/oak-security/resources/tree/main (search for "Cosm")
- https://pt.slideshare.net/tendermint/cosmos-sdk-workshop-how-to-build-a-blockchain-from-scratch?next_slideshow=true
- https://thenewstack.io/create-your-own-blockchain-at-interchain-developer-academy/
- https://tokeninsight.com/en/tokenwiki/course/into-the-cosmos-the-most-vibrant-ecosystem-outside-of-ethereum
- https://cosmology.tech/learn
- https://www.youtube.com/playlist?list=PLE4J1RDdNh6uCAsgygfvmheQoGJCUkCgI - what is IBC
- https://ibc.cosmos.network/main
- https://github.com/tendermint/spn - Starport Network built on Cosmos and Ignite
- https://github.com/tendermint/interchange - exemplary blockchain built on Ignite
- https://github.com/ignite - Swiss knife allowing for quick code beneration for Cosmos SDK blockchain
- https://code4rena.com/audits/2023-11-zetachain - ZetaChain C4 audit competition. Full of Cosmos & Go alpha
- https://github.com/oak-security/resources - wealth of security resources from Oak security, including Cosmos security related topics
- Halborn
- Oak Security
- Zellic
- Trail of Bits
- https://www.faulttolerant.xyz/2024-01-16-cosmos-security-1/
- https://www.halborn.com/blog/post/cosmos-security-overview
- https://www.zellic.io/blog/exploring-cosmos-a-security-primer/
- https://stakely.io/en/blog/what-is-interchain-security-on-cosmos-and-how-it-works
- https://secure-contracts.com/not-so-smart-contracts/cosmos/index.html
- https://www.halborn.com/blog/post/top-5-security-vulnerabilities-cosmos-developers-need-to-watch-out-for
- https://www.zellic.io/blog/exploring-cosmos-a-security-primer
- https://cosmos.github.io/interchain-security/
- https://www.coinbase.com/pl/cloud/discover/insights-analysis/all-you-need-to-know-about-interchain-security
- https://blog.trailofbits.com/2024/02/05/improving-the-state-of-cosmos-fuzzing/
- https://jumpcrypto.com/writing/
- https://hackerone.com/reports/2120609
- https://hackerone.com/cosmos/hacktivity
- https://thearchitect.notion.site/THORChain-Incident-07-15-7d205f91924e44a5b6499b6df5f6c210
- https://www.halborn.com/blog/post/explained-the-thorchain-hack-july-2021
- https://blog.trailofbits.com/2023/10/23/numbers-turned-weapons-dos-in-osmosis-math-library/
- https://forum.cosmos.network/t/vulnerability-coordination-retrospective-cosmos-mainnet-security-advisory-lavender-2020-04-09/3550
- https://forum.cosmos.network/t/cosmos-sdk-vulnerability-retrospective-security-advisory-jackfruit-october-12-2021/5349
- https://gitlab.com/thorchain/thornode/-/issues/1169
- cybercongress/go-cyber#66
- althea-net/cosmos-gravity-bridge#347
- https://giters.com/althea-net/cosmos-gravity-bridge/issues/348
- https://rekt.news/levana-rekt
- https://github.com/astroport-fi/astroport-audits
- https://github.com/HalbornSecurity/PublicReports/tree/master/CosmWasm%20Smart%20Contract%20Audits
- https://github.com/HalbornSecurity/PublicReports/tree/master/Cosmos%20Audits
- https://github.com/oak-security/audit-reports/tree/master/Cosmos
- https://github.com/oak-security/audit-reports/tree/master/Interchain%20Foundation
- https://github.com/oak-security/audit-reports/tree/master/All%20in%20Bits
- https://github.com/code-423n4/alpha-zetachain/blob/main/BlockChomper-0xladboy-reentrant/Collection_%26_Classes_of_Vulnerabilitiesc.md
- https://github.com/trailofbits/publications/blob/master/reviews/Umee.pdf
- https://github.com/oak-security/audit-reports/blob/master/Noble/2023-07-08%20Audit%20Report%20-%20Noble%20Tariff%20Module%20v1.0.pdf
- https://github.com/oak-security/audit-reports/blob/master/MilkyWay/2023-12-12%20Audit%20Report%20-%20MilkyWay%20Staking%20v1.0.pdf
- https://github.com/oak-security/audit-reports/blob/main/Persistence/2022-01-20%20Audit%20Report%20-%20Persistence%20Bridge%20-%20v1.0.pdf
- https://github.com/oak-security/audit-reports/tree/main/Stride
- https://github.com/oak-security/audit-reports/tree/main/Comdex
- https://github.com/oak-security/audit-reports/tree/main/Neutron
- https://github.com/oak-security/audit-reports/tree/main/Nolus
- https://github.com/oak-security/audit-reports/tree/main/Injective
- https://github.com/oak-security/audit-reports/tree/main/Noble
- https://github.com/oak-security/audit-reports/tree/main/Lum%20Network
- https://github.com/oak-security/audit-reports/tree/main/Sei
- https://github.com/oak-security/audit-reports/tree/main/Archway
- https://github.com/oak-security/audit-reports/tree/main/Evmos
- https://github.com/oak-security/audit-reports/tree/main/Skip
- https://github.com/oak-security/audit-reports/tree/main/Fairblock
- https://github.com/oak-security/audit-reports/tree/main/Dymension
- https://github.com/oak-security/audit-reports/tree/main/Slide%20SDK
- https://github.com/oak-security/audit-reports/tree/main/THORChain
- https://github.com/oak-security/audit-reports/tree/main/DoraFactory
- https://github.com/Zellic/publications/blob/master/Penumbra%20-%20Zellic%20Audit%20Report.pdf
- https://github.com/Zellic/publications/blob/master/ZetaChain%20-%2011.14.23%20Zellic%20Audit%20Report.pdf
- https://github.com/Zellic/publications/blob/master/Osmosis%20Authentication%20Abstraction%20-%20Zellic%20Audit%20Report.pdf
- https://github.com/Zellic/publications/blob/master/Nibiru%20-%20Zellic%20Audit%20Report.pdf
- https://github.com/Zellic/publications/blob/18a2471dc65cf1c017c101d116118d41b199d947/Cosmos%20SDK%20Sign%20Mode%20Textual%20-%20Zellic%20Audit%20Report.pdf
- https://github.com/Zellic/publications/blob/master/Pyth%20Network%20CosmWasm%20-%20Zellic%20Audit%20Report.pdf
- (CosmWasm) - https://static.levana.finance/audit-reports/levana-perps-peckshield-v1.0.pdf
- (CosmWasm) - https://static.levana.finance/audit-reports/levana-perps-fyeo-v1.1.pdf