The WEB3PWN Blog
Launch notes, vulnerability deep dives and chain internals from the team behind WEB3PWN, the hands-on Web3 security academy by ResearchZero.
Our fifth security tree takes you from STARK proofs and felt252 field math to exploiting account abstraction, cross-contract calls and upgrade paths. Every lab runs in a Cairo sandbox, right in your browser.
Channel open
One bug class at a time, dissected down to the line that broke and the assumption behind it.
Channel open
How EVM, Bitcoin, Solana, Canton and Starknet actually execute, and where their security models differ.
Channel open
New tracks, modules and labs as they ship, with the reasoning behind how we built them.
Every post maps back to labs you can solve in the browser. Follow along however you like.
Plug the feed into your reader and get new transmissions the moment they publish. No account, no tracking.
/feed.xmlStuck on a lab or found a nasty edge case worth arguing about? The community hangs out here.
Join the serverFive skill trees, sandboxed validation and a global leaderboard. Free, and nothing to install.
Start hacking free