slowmist/Knowledge-Base
slowmist/Knowledge-Base has 4,629 GitHub stars and 600 forks. GitHot measured +1 stars in 24 hours, +3 in 7 days, and +7 in 15 days. Last checked 2026-11-08 13:38 UTC. Last push 2026-10-30.
Comment ces chiffres sont mesurés
Base de connaissances de l’équipe de sécurité de SlowMist
Progression mesurée des étoiles
- in 24h
- +1
- in 7 days
- +3
- in 15 days
- +7
- in 1 month
- Mise à jour retardée
Variations nettes sur des périodes qui se chevauchent, pas des totaux quotidiens. Les mesures absentes restent vides. Les étoiles indiquent l’intérêt, pas la qualité.
README.md
OriginalKnowledge Base 慢雾安全团队知识库
慢雾科技：https://www.slowmist.com
慢雾区：https://www.slowmist.io
我们在努力成为区块链世界的“安全基础设施”。未知的才是有趣的，已知的如果不分享将会变得索然无味。
We strive to become the "security infrastructure" of the blockchain world. The unknown is what makes things exciting — what's already known becomes dull if not shared.
目录
区块链生态安全研究
Blockchain ecological security research, include: Bitcoin, Monero, Ethereum, EOS and other top blockchains.
- :fire: 加密资产追踪手册（Crypto Asset Tracing Handbook）
- :fire: Blockchain dark forest selfguard handbook(黑手册)
- :fire: Cryptocurrency Security Solution
- :fire: Collection of Security Research in English
- 慢雾安全技术研究合集
- 慢雾 AML 分析报告
- 慢雾区块链安全科普
- Papers of SlowMist
- Public topic of SlowMist HackingTime
False Top-up
慢雾安全团队依靠多年的区块链安全行业经验，深入研究了各种针对数字货币交易平台充值入账的攻击手法（假充值），并对各类假充值的攻击手法进行披露，为交易平台提供安全检查服务，保障交易平台的充值入账安全。
Backed by years of experience in blockchain security, the SlowMist security team has conducted in-depth research into various attack methods targeting digital asset exchanges — particularly "false Top-up" exploits. We have systematically disclosed these techniques and provide security auditing services to help exchanges safeguard their deposit systems.
- USDT 假充值手法
- EOS 假充值手法
- XRP 假充值手法
- 以太坊代币假充值手法
- 比特币 RBF 假充值手法
- XMR 锁定转账手法
- 以太坊假充值手法
- Solana/Tron/Terra/BTC/Dogcoin/LTC/Toncoin/Avax/IOST/Filecoin/NEM 假充值手法-未公开
零知识证明与密码学漏洞研究
Zero-knowledge proofs and cryptographic vulnerability research.
- 揭秘以太坊 Vanity 生成器 Profanity 私钥破解漏洞
- zk-SNARK Groth16 详解
- Cairo 0 安全审计实践指南
- 探讨 Poseidon 延展性攻击
- Fiat-Shamir 冰心漏洞解析
- Ed25519 实现原理与可延展性问题
- 扭曲攻击漏洞解析
- Groth16 证明延展性攻击原理及实现
- Circom 验证合约输入假名漏洞
- 盘点 ZKP 主流实现方案技术特点
- ECDSA 签名中的私钥泄露：elliptic 库畸形输入漏洞分析
AI 安全研究
Security research related to AI: AI for Security and Security for AI.
- :fire:OpenClaw 极简安全实践指南 (Security Practice Guide)
- :fire:SlowMist Agent Security Skill
- :fire:MistTrack Skills
- MCP 安全检查清单
- MasterMCP: showcase various potential security attack vectors against MCP
- MistTrack MCP Server
翻译资料
Some translated blockchain security documents.
开放报告
Some open security audit reports of SlowMist.
Some open MistTrack investigation reports of SlowMist.
安全实践指南
实践永远最踏实/Practice is always the most reliable.
- Web3 项目安全实践要求/Web3 Project Security Practice Requirements
- 慢雾(SlowMist)智能合约审计技能树/SlowMist Learning Roadmap for Becoming a Smart Contract Auditor
- Solana Smart Contract Security Best Practices
- Account Abstraction Security Audit Checklist
- APTOS MOVE 智能合约审计入门
- Toncoin 智能合约安全最佳实践/Toncoin Smart Contract Security Best Practices
- SUI Move 合约审计方法/SUI Move Contract Audit Method
- 基于区块链的加密货币安全审计指南/Blockchain-Based Cryptocurrency Security Audit Guide
- AAVE V2 安全审计手册
- Ontology Triones Service Node security checklist
- vechain core nodes security checklist
- EOS BP nodes security checklist
- EOS BP nodes security audit
- EOS smart contract security best practices
一些思维导图
Some mind maps of blockchain security.
其他资料
Other awesome collections.
Explorer des projets similaires
trimstray/the-book-of-secret-knowledge
Une collection de listes inspirantes, de manuels, d’antisèches, de blogs, d’astuces, de commandes en une ligne, d’outils CLI et web, et plus encore.
257,023 étoilesHack-with-Github/Awesome-Hacking
Une collection de diverses listes awesome pour les hackers, les pentesters et les chercheurs en sécurité.
125,014 étoilesswisskyrepo/PayloadsAllTheThings
Une liste de payloads et de méthodes de contournement utiles pour la sécurité des applications web et le pentest/CTF.
82,508 étoilescaddyserver/caddy
Serveur web HTTP/1-2-3 rapide, extensible et multiplateforme, avec HTTPS automatique
78,910 étoiles