5 Weeks of Online Classes

Invariant Testing Bootcamp

Go from zero to hero in using stateful fuzzing to secure and break smart contracts
Next Cohort:
TBA
TBA
Bootcamp is fully booked and we'll announce the new date soon.
Apply Now

In the Recon x RareSkills Invariant Testing Bootcamp, you’ll go from zero to hero in using stateful fuzzing to secure and break smart contracts.

You’ll learn:

  • The philosophy and mental models behind fuzzing
  • How to set up projects for meaningful testing
  • How to drive toward high coverage
  • How to identify and write high-impact invariants

The bootcamp is paced for professionals with a day job and is structured to guide participants through fuzzing an entire protocol from scratch. Optional advanced assignments are available for those who want to go deeper.

Before You Start

Prerequisites

Proficiency in Solidity
Solid understanding of smart-contract security fundamentals
Familiarity with the ERC-4626 standard

Structured For Success

Invariant Testing Bootcamp Curriculum

Last Updated: December 2025
Week 1

Getting Started

Introduction to invariant testing, stateful vs. stateless fuzzing, differences between Foundry, Echidna, and Medusa, an overview of Chimera, and scaffolding your first ERC-4626 vault.
Week 2

Scaffolding Real Protocols

Scaffolding production-grade protocols (e.g., Morpho Blue), coverage-first methodology, corpus reuse, mocking oracles and IRMs, clamping for faster coverage, and dynamic deployments.
Week 3

Managers and Property Types

Multi-actor and multi-token setups, AssetManager and ActorManager patterns, and deep dives into Global, Inlined, and Doomsday properties.
Week 4

Writing Properties

The five property classifications (Valid States, State Transitions, Variable Transitions, High-Level Properties, and Unit Tests), ghost variables, try/catch patterns, and systematic debugging of failing properties.
Week 5

Weakest Precondition

Formal verification vs. fuzzing, symbolic storage, proving properties with Halmos, and understanding when each approach is the right tool.

Join Our Invariant Testing Bootcamp

Next Cohort:
TBA
TBA
Apply Now

Meet Your Mentor

Your Instructor

Antonio Viggiano

Antonio Viggiano is an independent security researcher specialized in invariant testing. He transitioned to blockchain security in 2022 and has since collaborated with leading protocols, built fuzz-testing platforms, and shared his experience through research and conference talks.

Welcome Onboard

Onboarding Process

1

Apply To Enroll

2

Payment

3

Course Access

4

Attend Class

What To Expect

Course Structure

Each week, there will be one hour of live class and one hour of office hours with the instructor. Both sessions will be recorded, but you shouldn’t miss them, as they are designed to be highly interactive. The purpose of the office hours is for students to ask questions, review homework, and discuss in more detail the topics presented in class. Students on the premium plan can schedule weekly one-on-one meetings with the instructor.

Flexible Plans

Invariant Testing Bootcamp Pricing

Next Cohort:
TBA
TBA

$1,500/upfront
  • 5 × Weeks Lectures and Office Hours
  • Tailored Homework
  • Access to the RareSkills Slack & Discord Community (Lifetime Access)
Apply Now
Save 2% if you pay with USDC or USDT

Making Their Mark

Our Impressive Alumni

Highest earning security researcher in Cantina, with over $600,000 in earnings.
Zigtur
Joined zkSync, Shortly After Completing Our ZK Bootcamp.
Rahul Saxena
Landed a job in Coinbase, shortly after completing our course.
Darian Chan
Co-authored ERC-3643 & Worked as a tech lead at PolyTrade & Biconomy.
Adam Boudjemaa
DevRel at Chainlink
Andrej Rakic
Hired as a Zero-Knowledge Security Researcher at zkSecurity after completing the ZK bootcamp
Marco Besier
Achieved a Top 10 finish in the Reserve Protocol competition
agent3blood
Co-founded Kwenta, which was later acquired by Synthetix
etnom
Former Privacy Scaling Engineer at the Ethereum Foundation, now Lead Engineer at Cryptex Finance
crisgarner.eth
Serving as Blockchain Lead at the Fantom Foundation
Evgenii Danilenko

Everything You Need To Know

Frequently Asked Questions

Allocate 6 hours per week.

You need to be fluent with Solidity syntax and know the basics of how DeFi protocols operate, especially vaults. It will be hard to test if a DeFi protocol is working properly if you don't already know how it is expected to work.

Absolutely. RareSkills is the #1 resource for auditors in Web3. Auditors from very established audit firms (such as OpenZeppelin, Consensys, Spearbit, Sherlock, Certora, Immunefi etc) read our materials regularly and frequently cite our articles in audit reports.

Although this isn’t a “security” course per-se, you will still get a lot of practice spotting realistic bugs in production code.

That said, we cannot provide any guarantees about how successful your security career will be — although we should point out that some of our alumni have been *wildly* successful.

If we think you are a potential fit, we will reach out to you for an interview.

No. Job guarantees are a marketing gimmick. Your career is completely your responsibility and it cannot be delegated for a price.

We run a Web3 engineering recruitment agency and have directly helped dozens of engineers get new jobs, both from this bootcamp and from non-students who join our recruitment agency through other channels.

We have direct relationships with some of the most influential companies in the Web3 space (meaning we talk with their founders regularly, not that we decided to slap their logo on our website). So we *know* what we are talking about here.

Employers overwhelmingly care about past production experience with Web3. Your “certificates” and “courses” hold zero weight.

This obviously creates a significant chicken-and-egg problem for engineers who didn’t join Web3 more than two years ago!

You break the chicken-and-egg problem of experience by repeatedly proving your smart contract skills in a competitive environment such as a hackathon, smart contract security audit contest, or by delivering on grants or bounties for blockchain foundations. You don’t break the chicken-and-egg problem by getting a certificate. There is no industry-recognized certificate that accomplishes it.

Fundamentally, you need to prove you are better than other engineers who want the same job, which can only be done in a competitive setting.

By proving yourself in a competitive setting, you show that you have more of a measurable skill than other candidates and that you have higher intrinsic motivation.

If you are just looking for a new blockchain job, please note that you do not need to be a RareSkills student to use our recruitment agency. You do not need to pay anything or be part of the RareSkills community to use our recruitment services. Fill out the form in RareTalent. If we accept your application, you will get a free 30 minute consultation to work on your resume.

Please connect with us here.

Apply Now