Expert level Blockchain and Web3 Engineering

Attack, Defend, Audit

Learn how smart contracts are broken and how professionals defend them: vulnerability classes, Foundry fuzzing and invariant testing, DeFi mechanics and oracle attacks, upgradeability and cross-chain risk, static and formal analysis, and the audit process from scoping to a written report.

  • 45hours of work
  • 13parts
  • Reviewedcapstone
  • Lifetimeaccess
  • Smart contract security
  • Foundry fuzzing and invariants
  • DeFi protocol analysis
  • Static analysis with Slither
  • Upgradeability risk
  • Security auditing and reporting

At a glance

Who it is for

Solidity developers who want to specialise in security, protocol engineering or auditing, and teams who need to ship contracts that hold real value.

Before you start

The intermediate programme in this track or equivalent: Solidity with custom errors and inheritance, OpenZeppelin, Hardhat tests, ERC-20 and ERC-721 and basic dApp deployment. Comfort reading other people's code and basic algebra for the AMM and lending maths. All exercises use local chains and forks, never live systems.

How you finish

Pass the quizzes and labs, then submit a capstone project. The NIBVEDA team reviews it and either accepts it or sends it back with comments you can act on.

What you will be able to do

  1. 01Recognise and explain the major smart contract vulnerability classes with real historical examples
  2. 02Write Foundry unit, fuzz and invariant tests that find bugs and prove properties
  3. 03Reason about AMM, lending and vault mechanics, oracle manipulation, flash loans and MEV
  4. 04Assess proxy upgradeability, bridges and Layer 2 specifics for hidden risk
  5. 05Run a structured audit and write clear, severity-ranked findings with fixes

Curriculum 45 hours in 13 parts

Select a kind to highlight its parts.

Stage 1Break and repair a deliberately vulnerable DeFi protocol6 parts · 17 h
  1. 1
    The attacker's view: why contracts get hacked and a taxonomy of bugsWorkshop · Follow along and build, with the steps and the traps written out.
    3 hFree
  2. 2
    Foundry for security testing: fuzzing, cheatcodes and forksWorkshop · Follow along and build, with the steps and the traps written out.
    2 h
  3. 3
    Reproduce reentrancy and access-control bugs on a local chain, then fix themWorkshop · Follow along and build, with the steps and the traps written out.
    2 h
  4. 4
    Check yourself: Foundry and core vulnerability classesQuiz · Twelve questions, marked at once, with the reason behind each answer.
    1 h
  5. 5
    DeFi mechanics: AMMs, lending, vaults, oracles and flash loansWorkshop · Follow along and build, with the steps and the traps written out.
    3 h
  6. 6
    Break and repair a deliberately vulnerable DeFi protocolLab · Hands-on work. Many labs are checked automatically against what must exist.
    6 h
Stage 2Audit a codebase and deliver a professional report5 parts · 13 h
  1. 7
    Static analysis, fuzzing and formal verificationWorkshop · Follow along and build, with the steps and the traps written out.
    2 h
  2. 8
    Check yourself: DeFi mechanics, oracles and analysis toolsQuiz · Twelve questions, marked at once, with the reason behind each answer.
    1 h
  3. 9
    Upgradeability, bridges, cross-chain messaging and Layer 2 specificsWorkshop · Follow along and build, with the steps and the traps written out.
    2 h
  4. 10
    The audit process: scoping, review method, severity and reportingWorkshop · Follow along and build, with the steps and the traps written out.
    2 h
  5. 11
    Audit a codebase and deliver a professional reportLab · Hands-on work. Many labs are checked automatically against what must exist.
    6 h
Stage 3Upgrades, bridges, Layer 2 and auditing1 part · 1 h
  1. 12
    Check yourself: upgrades, bridges, Layer 2 and auditingQuiz · Twelve questions, marked at once, with the reason behind each answer.
    1 h
FinishCapstone project1 part · 14 h
  1. 13
    Secure a protocol end to end and publish your security portfolioCapstone · A full project for your portfolio.
    14 h
Free lessonThe attacker's view: why contracts get hacked and a taxonomy of bugs
What you take away

An internship certificate with your skills on it.

Made for you automatically when you finish the last part, it names the internship programme, the level and the 45 hours, lists what you showed, and carries a number and a QR code. Anyone can check it on the NIBVEDA verification page, and it shows as withdrawn there if it is ever revoked.

  • Proof you completed all 45 hours of this internship programme
  • An Internship badge for your profile, CV or portfolio
  • Not a job, a stipend or an academic degree, and it says so

See how verification works

More in Blockchain and Web3 Engineering

Keep building.

3 programmes in this track, from beginner to expert. Buy the learning path and save 15%.

IntermediateIntermediate41 h Tokens, Testing and dApps

Write production-style Solidity: storage, inheritance and custom errors, then test with Hardhat, build ERC-20, ERC-721 and staking contracts with OpenZeppelin, learn gas and design patterns, build a dApp front end with ethers.js and deploy and verify to a public test network.

  • Solidity
  • Hardhat
  • OpenZeppelin
Rs. 649 + GST
BeginnerBeginner41 h Build a Blockchain and Your First Smart Contracts

Understand how blockchains really work by building one in Python: hashing, digital signatures, blocks, proof of work, wallets and transactions. Then learn Ethereum accounts and gas, deploy simple Solidity contracts with Remix to a test network and learn how to spot scams and risks.

  • Blockchain concepts
  • Hashing and digital signatures
  • Python
Rs. 299 + GST

See all 3 programmes in Blockchain and Web3 Engineering Take the placement test

Before you enrol

Quick answers.

The policies have the full detail.

Refund policy Terms of use

Is this a real internship?

It is a virtual internship programme: a structured, self-paced course built around a real project, with checked assessments and a certificate. It is not employment, it does not carry a stipend and it is not an academic or AICTE-approved qualification. What it gives you is verified, project-based evidence of skills.

How does self-paced work?

You start when you like and move at your own speed. Each part unlocks when you finish the one before it. There are no live classes and no deadlines. Your access is shown on each programme page.

How is my work checked?

Quizzes are marked as soon as you submit them. Labs use a tick-list of tasks. Intermediate and Expert programmes finish with a capstone that the NIBVEDA team reviews and either accepts or sends back with comments.

Can I get a refund?

Please read the refund policy before you buy. It explains when a refund is possible.

Ready to start?

Rs. 1,178.82 including GST. Lifetime access. Read the first lesson free before you decide.

Compare programmes