slowmist/Knowledge-Base aggregates the SlowMist team's blockchain security research, audit reports, and practice guides for defensive professionals working authorized engagements.
| Tool | slowmist/Knowledge-Base — curated blockchain security knowledge base from the SlowMist team, spanning smart contracts, cryptography, and AI security research |
| Category | Security research repository / knowledge base |
| Primary Use | Reference material for auditors and defenders: false top-up research, ZK/cryptographic vulnerability analyses, smart contract audit checklists, and open investigation reports |
| Safe Use | Educational and documentary analysis for authorized security assessments, audit engagements, and defensive research on systems you own or are contracted to test |
| Telemetry Note | Purely a documentation repository — generates no network activity or footprint; defenders observe nothing beyond ordinary git clone traffic against github.com |
Not every repository that matters in offensive security is a binary you run. slowmist/Knowledge-Base, maintained by the SlowMist blockchain security team, is a living index of the organization's published research, and at roughly 4,600 stars it has become one of the denser reference shelves in the blockchain security niche. The README states the team's ambition plainly — to become the "security infrastructure" of the blockchain world — and the structure of the repo reflects that: it is organized into research tracks, translations, open audit reports, practice guides, and mind maps, each pointing either to sibling repositories under the slowmist organization or to original articles. For an operator who spends time on exchanges, wallets, or smart contracts, this is closer to a syllabus than a tool, and that is its value.
The core of the collection is what the team calls blockchain ecological security research, explicitly covering Bitcoin, Monero, Ethereum, and EOS among other major chains. The flagship entries are spun off into their own repositories: the Crypto-Asset-Tracing-Handbook, the widely circulated Blockchain-dark-forest-selfguard-handbook, and a general cryptocurrency-security solution set. There is also an English-language collection of security research kept directly in the tree under security-research/, which is the natural entry point for non-Chinese-reading professionals. The bilingual character of the repo is worth flagging: a significant share of the linked analysis lives on WeChat article albums, so readers comfortable only in English should expect to lean on the dedicated English collections and GitHub-hosted guides.
The most operationally interesting research track is the false top-up series. The team documents, chain by chain, how deposit-crediting logic at exchanges has been abused historically — USDT partial-payment tricks, EOS memo and account tricks, XRP partial payments (linking out to Ripple's own developer documentation), Ethereum token transfer quirks, Bitcoin RBF manipulation, and Monero locked-transfer behavior. The framing throughout is defensive: the team states it discloses these techniques so exchanges can run security checks on their deposit systems, and several chains' variants are listed as unpublished precisely because disclosure would outpace remediation. For blue teams at exchanges, this list is essentially a checklist of historical crediting bugs to verify against — confirmations counting, partial-payment handling, RBF mempool policy, and token-level transfer semantics.
A second research track covers zero-knowledge proofs and cryptographic implementation flaws, and it is unusually specific. Entries dissect the Profanity vanity address generator key-recovery vulnerability, the zk-SNARK Groth16 proving system (with a companion starter repository), Poseidon hash malleability, Fiat-Shamir implementation pitfalls, Ed25519 malleability, twist attacks, Circom verifier input aliasing, and an ECDSA private-key leak traced to malformed input handling in the elliptic JavaScript library. There are audit primers for Cairo 0 and zkSnark-Groth16-Getting-Started repos as well. This is the layer where cryptographic engineering meets exploitability, and the writeups function as case studies in why canonicalization, domain separation, and strict input validation are non-negotiable in ZK systems.
The AI security section is newer but growing fast, and it covers both directions: security for AI and AI for security. Notable artifacts include the MCP-Security-Checklist for hardening Model Context Protocol deployments, MasterMCP described as a showcase of potential attack vectors against MCP, and skill packages such as slowmist-agent-security and misttrack-skills that wrap the team's MistTrack analytics into agent-consumable form. There is also an OpenClaw security practice guide. For defenders wrestling with the current wave of agentic tooling in security workflows, the MCP material is among the more concrete public checklists available, and the MistTrackMCP server illustrates how investigation tooling is being adapted to conversational interfaces.
The translations section addresses a real gap: important English-language blockchain security material rendered into Chinese, including the DASP top-ten smart contract weakness list, a comprehensive Solidity attack-vector and anti-pattern reference, and a systematic overview of public blockchain attack surfaces. The direction of translation is worth noting — this is SlowMist serving its Chinese-speaking audience Western canonical material, which also signals to Western readers which documents the team considers foundational. The Solidity security translation in particular is a good cross-reference when building audit methodologies for EVM contracts.
Arguably the section with the highest reuse value for working auditors is the practice guide collection. It includes security requirement baselines for Web3 projects, the Slowmist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor skill tree, best-practice documents for Solana and Toncoin smart contracts, auditing primers for Aptos Move and Sui Move, an AAVE V2 audit checklist, an account abstraction audit checklist, and node-hardening checklists for Ontology, VeChain, and EOS block producer nodes. The breadth across EVM, Solana, Move-family, and TON ecosystems makes this one of the few public collections where an auditor can pull a chain-specific baseline before an engagement rather than writing one from scratch.
The open reports section deserves separate mention because it publishes actual audit deliverables: blockchain security audits, blockchain application audits, and smart contract audits under open-report-V2/, plus a set of open MistTrack investigation reports that document how the team traced funds in real incident scenarios. From a documentary perspective, the audit reports are a rare chance to see how a mature team structures findings, severity, and remediation language — useful both for junior auditors calibrating their own reporting and for defenders who want to understand what an exchange-grade engagement actually produces. No victim-identifying operational detail is needed to learn from the format.
The repo closes with mind maps — notably DApp attack-and-defense, exchange/wallet attack-and-defense, and an explicitly labeled "evil blockchain" map — plus pointers to the hacked.slowmist.io incident tracker, an awesome-blockchain-bug-bounty list, and EOS-specific monitoring services like EOS MonKit and the FireWall.X contract firewall project. These maps compress years of incident response into single-image taxonomies, which makes them effective teaching aids and briefing material when explaining threat models to engineering teams that own crypto infrastructure.
There is nothing to install here, which is the point — consumption is reading and cross-referencing. If you want a local copy for offline reference during an engagement, the only invocation that matters is git clone https://github.com/slowmist/Knowledge-Base, after which the in-tree documents under security-research/, translations/, open-report-V2/, and mindmaps/ are available directly while the remainder are links out to sibling repositories. Because much of the content links externally to WeChat albums and SlowMist properties, expect link rot and plan to archive anything you depend on.
Caveats are the usual ones for a curated index: coverage reflects one team's research agenda, a substantial portion is Chinese-language, and some listed material is intentionally withheld. Nothing here constitutes a working exploit chain — it is disclosure-oriented research, checklists, and reports — but the false top-up and ZK sections do assume solid grounding in the underlying chains and cryptography. Used as intended, as a reference library for authorized audits and defensive hardening of blockchain infrastructure, slowmist/Knowledge-Base is one of the better-maintained entry points into a specialty that rarely gets this level of systematic documentation.
slowmist/Knowledge-Base.Educational analysis for authorized security professionals. Use only in controlled, authorized environments.
Related coverage
0 comentários:
Post a Comment
Note: Only a member of this blog may post a comment.