Track 9 · What now · lesson 4
Keeping up
10 min
This field changes fast, and most of what is written about it is noise designed to sell you something. The last skill is filtering signal from that.
You do not need to keep up with prices, tokens, or announcements. You need to keep up with how the technology and its attacks evolve — and that moves much more slowly and lives in specific, quiet places.
Where the signal is
- Post-mortems. After every major hack, someone writes up exactly what happened. rekt.news and the protocols' own reports are the single best ongoing education in security — each one is a Breach Lab lesson from the real world.
- Audit firms' blogs. Trail of Bits, OpenZeppelin, Spearbit publish findings and new attack classes as they emerge.
- The core repos. The Solidity changelog, EIPs under discussion, and the clients. This is where the ground actually shifts, ahead of the commentary.
- A few practitioners, not influencers. You will learn who by reading the above and noticing whose names recur for the right reasons.
What to ignore
Price talk. Token launches. "This changes everything" threads. Anything urgent. None of it makes you better at building or securing contracts, and the urgency is manufactured to keep you scrolling.
Predict
What is the most useful thing to read regularly to stay sharp on security?
The end, and the point
You started not knowing why a blockchain needed to exist. You can now write, deploy, test, break, and defend smart contracts — and read the ones other people wrote.
That is not a small thing, and it is genuinely enough to build real things and to keep getting better on your own. The field rewards people who ship, who read carefully, and who assume everything on-chain is adversarial. You have practised all three.
Go build something. Then go break it before someone else does.
Check
What's worth keeping up with, and what isn't?
Worth remembering
- Keep up with how the technology and its attacks evolve, not with prices or launches.
- Post-mortems of real hacks are the best ongoing security education.
- Audit-firm blogs and the core repos (Solidity, EIPs, clients) are where the ground shifts first.
- Ignore manufactured urgency — it doesn't make you better at building or breaking.
- You can now write, deploy, test, break and defend contracts. Go build something.