slowmist/Knowledge-Base
slowmist/Knowledge-Base has 4,628 GitHub stars and 600 forks. GitHot measured 0 stars in 24 hours, +2 in 7 days, and +6 in 15 days. Last checked 2026-11-07 14:43 UTC. Last push 2026-10-30.
Knowledge Base 慢雾安全团队知识库
实测星标增长
- 24小时
- 0
- 7天
- +2
- 15天
- +6
- 1个月
- 更新延迟
各周期内的星标净变化，周期相互重叠，并非每日新增。缺失的测量保持空白。星标代表关注度，不代表软件质量。
README.md
原文Knowledge Base 慢雾安全团队知识库
慢雾科技：https://www.slowmist.com
慢雾区：https://www.slowmist.io
我们在努力成为区块链世界的“安全基础设施”。未知的才是有趣的，已知的如果不分享将会变得索然无味。
We strive to become the "security infrastructure" of the blockchain world. The unknown is what makes things exciting — what's already known becomes dull if not shared.
目录
区块链生态安全研究
Blockchain ecological security research, include: Bitcoin, Monero, Ethereum, EOS and other top blockchains.
- :fire: 加密资产追踪手册（Crypto Asset Tracing Handbook）
- :fire: Blockchain dark forest selfguard handbook(黑手册)
- :fire: Cryptocurrency Security Solution
- :fire: Collection of Security Research in English
- 慢雾安全技术研究合集
- 慢雾 AML 分析报告
- 慢雾区块链安全科普
- Papers of SlowMist
- Public topic of SlowMist HackingTime
False Top-up
慢雾安全团队依靠多年的区块链安全行业经验，深入研究了各种针对数字货币交易平台充值入账的攻击手法（假充值），并对各类假充值的攻击手法进行披露，为交易平台提供安全检查服务，保障交易平台的充值入账安全。
Backed by years of experience in blockchain security, the SlowMist security team has conducted in-depth research into various attack methods targeting digital asset exchanges — particularly "false Top-up" exploits. We have systematically disclosed these techniques and provide security auditing services to help exchanges safeguard their deposit systems.
- USDT 假充值手法
- EOS 假充值手法
- XRP 假充值手法
- 以太坊代币假充值手法
- 比特币 RBF 假充值手法
- XMR 锁定转账手法
- 以太坊假充值手法
- Solana/Tron/Terra/BTC/Dogcoin/LTC/Toncoin/Avax/IOST/Filecoin/NEM 假充值手法-未公开
零知识证明与密码学漏洞研究
Zero-knowledge proofs and cryptographic vulnerability research.
- 揭秘以太坊 Vanity 生成器 Profanity 私钥破解漏洞
- zk-SNARK Groth16 详解
- Cairo 0 安全审计实践指南
- 探讨 Poseidon 延展性攻击
- Fiat-Shamir 冰心漏洞解析
- Ed25519 实现原理与可延展性问题
- 扭曲攻击漏洞解析
- Groth16 证明延展性攻击原理及实现
- Circom 验证合约输入假名漏洞
- 盘点 ZKP 主流实现方案技术特点
- ECDSA 签名中的私钥泄露：elliptic 库畸形输入漏洞分析
AI 安全研究
Security research related to AI: AI for Security and Security for AI.
- :fire:OpenClaw 极简安全实践指南 (Security Practice Guide)
- :fire:SlowMist Agent Security Skill
- :fire:MistTrack Skills
- MCP 安全检查清单
- MasterMCP: showcase various potential security attack vectors against MCP
- MistTrack MCP Server
翻译资料
Some translated blockchain security documents.
开放报告
Some open security audit reports of SlowMist.
Some open MistTrack investigation reports of SlowMist.
安全实践指南
实践永远最踏实/Practice is always the most reliable.
- Web3 项目安全实践要求/Web3 Project Security Practice Requirements
- 慢雾(SlowMist)智能合约审计技能树/SlowMist Learning Roadmap for Becoming a Smart Contract Auditor
- Solana Smart Contract Security Best Practices
- Account Abstraction Security Audit Checklist
- APTOS MOVE 智能合约审计入门
- Toncoin 智能合约安全最佳实践/Toncoin Smart Contract Security Best Practices
- SUI Move 合约审计方法/SUI Move Contract Audit Method
- 基于区块链的加密货币安全审计指南/Blockchain-Based Cryptocurrency Security Audit Guide
- AAVE V2 安全审计手册
- Ontology Triones Service Node security checklist
- vechain core nodes security checklist
- EOS BP nodes security checklist
- EOS BP nodes security audit
- EOS smart contract security best practices
一些思维导图
Some mind maps of blockchain security.
其他资料
Other awesome collections.
探索相关项目
trimstray/the-book-of-secret-knowledge
汇集各类启发灵感的清单、手册、速查表、博客、技巧、单行命令、CLI/Web 工具等内容。
256,737 星标Hack-with-Github/Awesome-Hacking
面向黑客、渗透测试人员与安全研究人员的各类 Awesome 清单合集。
124,920 星标swisskyrepo/PayloadsAllTheThings
一份用于 Web 应用安全以及渗透测试/CTF 的实用 payload 与绕过方法列表。
82,475 星标caddyserver/caddy
快速、可扩展的跨平台 HTTP/1-2-3 Web 服务器，支持自动 HTTPS
78,878 星标