slowmist/Knowledge-Base
slowmist/Knowledge-Base has 4,629 GitHub stars and 600 forks. GitHot measured +1 stars in 24 hours, +3 in 7 days, and +7 in 15 days. Last checked 2026-11-08 13:38 UTC. Last push 2026-10-30.
Base de conocimiento del equipo de seguridad de SlowMist
Crecimiento de estrellas medido
- in 24h
- +1
- in 7 days
- +3
- in 15 days
- +7
- in 1 month
- Actualización retrasada
Cambios netos en períodos que se solapan, no totales diarios. Los datos no disponibles se dejan en blanco. Las estrellas indican interés, no calidad.
README.md
OriginalKnowledge Base 慢雾安全团队知识库
慢雾科技：https://www.slowmist.com
慢雾区：https://www.slowmist.io
我们在努力成为区块链世界的“安全基础设施”。未知的才是有趣的，已知的如果不分享将会变得索然无味。
We strive to become the "security infrastructure" of the blockchain world. The unknown is what makes things exciting — what's already known becomes dull if not shared.
目录
区块链生态安全研究
Blockchain ecological security research, include: Bitcoin, Monero, Ethereum, EOS and other top blockchains.
- :fire: 加密资产追踪手册（Crypto Asset Tracing Handbook）
- :fire: Blockchain dark forest selfguard handbook(黑手册)
- :fire: Cryptocurrency Security Solution
- :fire: Collection of Security Research in English
- 慢雾安全技术研究合集
- 慢雾 AML 分析报告
- 慢雾区块链安全科普
- Papers of SlowMist
- Public topic of SlowMist HackingTime
False Top-up
慢雾安全团队依靠多年的区块链安全行业经验，深入研究了各种针对数字货币交易平台充值入账的攻击手法（假充值），并对各类假充值的攻击手法进行披露，为交易平台提供安全检查服务，保障交易平台的充值入账安全。
Backed by years of experience in blockchain security, the SlowMist security team has conducted in-depth research into various attack methods targeting digital asset exchanges — particularly "false Top-up" exploits. We have systematically disclosed these techniques and provide security auditing services to help exchanges safeguard their deposit systems.
- USDT 假充值手法
- EOS 假充值手法
- XRP 假充值手法
- 以太坊代币假充值手法
- 比特币 RBF 假充值手法
- XMR 锁定转账手法
- 以太坊假充值手法
- Solana/Tron/Terra/BTC/Dogcoin/LTC/Toncoin/Avax/IOST/Filecoin/NEM 假充值手法-未公开
零知识证明与密码学漏洞研究
Zero-knowledge proofs and cryptographic vulnerability research.
- 揭秘以太坊 Vanity 生成器 Profanity 私钥破解漏洞
- zk-SNARK Groth16 详解
- Cairo 0 安全审计实践指南
- 探讨 Poseidon 延展性攻击
- Fiat-Shamir 冰心漏洞解析
- Ed25519 实现原理与可延展性问题
- 扭曲攻击漏洞解析
- Groth16 证明延展性攻击原理及实现
- Circom 验证合约输入假名漏洞
- 盘点 ZKP 主流实现方案技术特点
- ECDSA 签名中的私钥泄露：elliptic 库畸形输入漏洞分析
AI 安全研究
Security research related to AI: AI for Security and Security for AI.
- :fire:OpenClaw 极简安全实践指南 (Security Practice Guide)
- :fire:SlowMist Agent Security Skill
- :fire:MistTrack Skills
- MCP 安全检查清单
- MasterMCP: showcase various potential security attack vectors against MCP
- MistTrack MCP Server
翻译资料
Some translated blockchain security documents.
开放报告
Some open security audit reports of SlowMist.
Some open MistTrack investigation reports of SlowMist.
安全实践指南
实践永远最踏实/Practice is always the most reliable.
- Web3 项目安全实践要求/Web3 Project Security Practice Requirements
- 慢雾(SlowMist)智能合约审计技能树/SlowMist Learning Roadmap for Becoming a Smart Contract Auditor
- Solana Smart Contract Security Best Practices
- Account Abstraction Security Audit Checklist
- APTOS MOVE 智能合约审计入门
- Toncoin 智能合约安全最佳实践/Toncoin Smart Contract Security Best Practices
- SUI Move 合约审计方法/SUI Move Contract Audit Method
- 基于区块链的加密货币安全审计指南/Blockchain-Based Cryptocurrency Security Audit Guide
- AAVE V2 安全审计手册
- Ontology Triones Service Node security checklist
- vechain core nodes security checklist
- EOS BP nodes security checklist
- EOS BP nodes security audit
- EOS smart contract security best practices
一些思维导图
Some mind maps of blockchain security.
其他资料
Other awesome collections.
Explorar proyectos relacionados
trimstray/the-book-of-secret-knowledge
Una colección de listas inspiradoras, manuales, chuletas, blogs, trucos, comandos de una línea, herramientas de CLI y web, y más.
257,023 estrellasHack-with-Github/Awesome-Hacking
Una colección de diversas listas awesome para hackers, pentesters e investigadores de seguridad.
125,014 estrellasswisskyrepo/PayloadsAllTheThings
Una lista de payloads y métodos de bypass útiles para la seguridad de aplicaciones web y para pentesting/CTF.
82,508 estrellascaddyserver/caddy
Servidor web HTTP/1-2-3 rápido, extensible y multiplataforma con HTTPS automático
78,910 estrellas