ZeroDay Dev
Learn to break things
Free · Designed for iPad. Not verified for macOS.
Learn Web3 and AI security on your phone. Explore 200+ real exploits, AI jailbreaks, supply-chain attacks, and hands-on labs. Offline. $4.99 once.
Learn to break things—before attackers do.
ZeroDay Dev teaches secure coding and blockchain security through 4,000+ hands-on challenges. Learn from 120+ real-world exploits: Beanstalk, Indexed Finance, bZx, VeilCash, Sigma.Money, Bybit, and more. Each exploit is linked to verified incident records so you learn from actual on-chain events, not hypotheticals.
Practice — Build exploit intuition without reading docs. Tap vulnerable lines, drag tokens into code, get instant feedback. Filter by domain (Exploits, Solidity, Rust, DeFi, Solana) or difficulty.
Exercises — Full code challenges with reference solutions. Deeper dives when you're ready.
Exam — Prepare for real security assessments. Timed tests across domains with performance tracking. Memory-match decks for opcodes, EIPs, and security terms.
Deep Dive Hub — Curated learning tracks for Web2, Web3, Rust, ZK Proofs, and Trading. Recommended tracks driven by your weak areas. Build your own from bookmarks or missed questions.
Streaks & XP — Stay consistent and level up. Daily streaks, badges, and progression keep you coming back.
Offline-first — Learn on the subway, no Wi‑Fi needed. All content lives on your device. No account required—start immediately.
Covers reentrancy, oracle manipulation, flash loans, proxy races, ZK trusted setup, and more. Rust, Solidity, DeFi, Solana & cybersecurity.
more - Learn multiparty computation (MPC) from the basics to advanced review with examples, threshold signatures, recovery scenarios and a treasury capstone.
- Explore AI Home Lab guides for building and fine-tuning language models, plus Jev, Altar-1 and updated models.
- Build stronger foundations in networking, distributed systems, market making, options and machine learning with expanded guided practice.
- Understand private Ethereum transaction routing and find HSMs and TEEs together under Systems & Cloud Security.
3.0 2 days ago
- Practice SSH as a real terminal mission: move between directories, list hidden files, read permissions from ls output, and inspect a deployment log on the remote host.
- Build threshold signing in Rust with three new labs: split a secret into shares, sign with FROST, and identify a cheating participant.
- Study a rebuilt HSMs and TEEs deep dive organized around history and trust boundaries, with new diagrams and a linked threshold-signing section.
- Learn the hardware security stack: AWS Nitro Enclaves, Turnkey, YubiKey models, speculative execution, rollback attacks, and microarchitectural side channels.
- Look up the cryptography foundations in the glossary, including cryptology, cryptanalysis, cipher, plaintext, ciphertext, key space, Caesar cipher, frequency analysis, one-time pad, AES, RSA, DES, XOR, and block cipher modes.
- Work through production LLM engineering: hybrid and BM25 retrieval, incremental indexing, response caching, cost levers, canary rollout, fallbacks, and decoder-only models.
- Explore two new real-world incidents: the OpenAI community forum image-decoder and SSO chain, and NullReceiver, which hides command-and-control addresses inside empty blockchain transactions.
- Discover new AI topics including Lean theorem proving, Venture probabilistic programming, ethical AI usage, memory layout mechanics, and at-scale vector retrieval.
2.9 18 Sept
- Choose where Today starts and mark a section complete with clearer controls.
- Learn SSH step by step with explanations of permissions and command flags, plus easier-to-read shell lab instructions.
- Find syntax-highlighted commands and an alphabetical command reference in the At the Keyboard checklist.
- Measure RAG retrieval precision, context relevance, and hallucination rates with practical examples and graph orchestration guidance.
- Explore new lessons on building AI agents, zero-knowledge proofs, major 2026 exploits, path traversal, and why blockchains halt.
- Study expanded caching, hardware security, and Solana reference content, alongside updated incident coverage.
2.8 15 Sept
- Inspect Zcash Orchard transactions in Rust, with clearer explanations of private notes, nullifiers, block verification, and network upgrades.
- Follow practical Mac and network investigation checklists, and practice SSH setup and server connections.
- Explore expanded Bitcoin, NEAR, bridging, caching, and Bash scripting journeys.
- Study the updated Liquid incident and recovery timeline.
- Use improved Build helpers, hints, and worked examples, with more reliable Deep Dive ordering and incident discovery.
- Learn new glossary terms, including step functions and obliteration.
2.7 9 Sept
What's New in 2.6:
- Find and continue curated research faster with topic filters, reading progress, and expanded machine-learning paper coverage.
- Learn Rust more deeply through production-oriented projects, ownership guidance, testing and assertions from beginner to advanced.
- Explore expanded Zcash, Cosmos, networking, machine-learning, software supply-chain, and mobile-security journeys with clearer foundational explanations.
- Study newer real-world incidents and defensive workflows, including practical Linux, Git, shell, AI authorization, and safe traffic-analysis exercises.
- Reorder Quick Access and Your Learning in More, and use a cleaner single-row helper palette while editing Build lessons.
- Browse a clearer glossary with improved readability, real-world examples, related terms, and new coverage from VecDeque and ring buffers to model checkpoints and crypto safety.
2.6 1 Sept
Learn Linux from the ground up, including the kernel and user-space boundary, filesystems, shell commands, processes, services, packages, and runtime isolation.
Decode AI model names, understand model creators and leadership, and explore practical guidance for small language models, local deployment, and common labels such as uncensored and abliterated.
Follow clearer Networking Foundations and Network Privacy journeys covering diagnostics, VPNs, WireGuard, Tailscale, and remote-access tradeoffs.
Practice consensus safety and liveness, Solana staking requirements, and TCP, UDP, and QUIC transport decisions through expanded interactive lessons.
Edit Build lessons in a focused full-screen workspace with a dedicated helper palette and clearer task flow.
Explore newer Microsoft security incidents, expanded glossary explanations, and more reliable Deep Dive discovery throughout the app.
2.5 28 Aug
Try Tutor Beta to search reviewed local lessons, incidents, and glossary sources while on-device AI model evaluation continues.
Learn retrieval-augmented generation evaluation, AWS Bedrock responsibility boundaries, LangGraph workflows, and safer agent-loop design.
Practice Rust market microstructure, queue and latency reasoning, and an offline event-market maker through new hands-on lessons.
Explore expanded networking, WireGuard, VPN, Zcash, virtualization, QEMU/KVM, Hypervisor, GGML, and GGUF coverage.
Find glossary terms faster with indexed search and smoother filtering.
2.4 27 Aug
• Explore an offline Paper Library with curated security, cryptography, blockchain, networking, and AI research available inside the app.
• Use the new Command Deck to find practical terminal commands, understand what they do, and connect them to deeper learning paths.
• Learn how to run AI locally with a guided journey covering Ollama, model selection, quantization, privacy, security, evaluation, local document search, and hybrid routing.
• Go deeper on machine learning, AI model supply-chain threats, text watermarking, Monad, TLS, networking, VPNs, Tailscale, and quantum-resistant security.
• Build a complete Rust command-line tool through new lessons on call sites, worker channels, and a hands-on capstone.
• Browse expanded real-world incident, glossary, model, and API security coverage, including a refreshed catalog of current AI models.
• Deep Dive organization, search, Exam navigation, references, and learning-flow reliability have been improved throughout the app.
2.3 18 Aug
- Learn Monad from the protocol up, including MonadBFT, RaptorCast, sub-second finality, parallel execution, local mempools, transaction ordering, MEV boundaries, and recent network revisions.
- Every Deep Dive now begins with concise History & Context so you can understand where a technology came from and why it matters before starting the exercises.
- Mobile Security now includes practical GrapheneOS installation and hardening guidance, plus careful setup and recovery warnings for duress credentials.
- Newer real-world incidents including AFX Trade, the Verus Ethereum Bridge, B² Network, 42DAO, and an AI model-evaluation intrusion.
- Fund-tracing lessons now cover address poisoning, exchange service boundaries, and clearer techniques for following assets across systems.
- New SBOM and tarball glossary entries strengthen software supply-chain coverage, with broader security-content and reliability improvements throughout the app.
2.2 29 Jul
- Rust Today gives you a focused daily path with Study, guided and independent labs, short reviews, and visible daily progress.
- Spaced review brings completed Rust labs back as quick follow-up challenges so practice stays purposeful.
- Exploits adds dedicated AI and Supply Chain filters, clearer incident tags, and more accurate Live/Recent results.
- Dismissed breaking incidents are easier to recover from Home if you close one accidentally.
- Shell, Solidity, and AI Security labs now show clearer tasks and success criteria throughout each lesson.
2.1 13 Jul
- Prompt Library: the Helpful Prompts area is now the Prompt Library, with your own saved prompts pinned to the top and a dedicated My Prompts shortcut on the Home screen.
- Prompt chaining: combine several prompts into one and copy them together, with a quick in-app tip so the feature is easy to find.
- Build and the Rust journey: the Rust journey now has its own filter chips at the top, the catalog is cleaner, and your Build progress (tier, solved, streak) now lives in the Stats screen.
- Build reminders: set custom practice reminders by time and by days of the week.
- New real world exploit breakdowns: GnosisPay Delay module, Gravity Bridge, and Alephium TokenBridge, plus Zcash and Sui incidents.
- New hands on labs: PGP privacy training, API security in Rust, and Linux security tracks covering filesystem permissions and systemd privilege escalation.
- New Hyperliquid deep dive, smarter next best lesson recommendations, and a smoother Deep Dive flow.
- Updated AI reference with a refreshed model landscape including the latest providers and models.
- Fixes: lock screen widget text alignment and Deep Dive dismissal.
2.0.2 7 Jun
General updates.
- Breaking incidents notifications
- Deep Dives for PoW, PoS, Solana Staking, ZCash
- Extending Glossary Terms
2.0.1 28 May
> Breaking incidents, improved — Better live/recent incident discovery, clearer briefings, and easier rediscovery from the archive.
> Completed deep dives show as finished challenges and appear in your progress history.
> Three Home Screen widgets — Glossary, Exploits, and Checklist widgets now cover more of the app, with better layouts, rotation controls, and deep links.
> Chain Guide upgrades — Sort chains faster, scan updated details, and get clearer context around decentralization, privacy, and centralized-exchange risk.
> Build lab polish — A cleaner lesson layout gets you to the code faster while keeping the guided context close by.
> More current reference material — Refreshed glossary, reference, and exploit content make the app feel more useful as a daily study and security reference.
2.0 21 May
- Build is now our in-app coding lab, with guided Rust lessons, a more visible entry point in Practice, and direct handoff from related exercises into matching Build lessons.
- Added new real-world exploit and CVE content, including PAN-OS User-ID Authentication Portal (CVE-2026-0300), cPanel & WHM (CVE-2026-41940), TanStack npm Supply Chain, Ivanti Endpoint Manager Mobile (CVE-2026-6973), Grok Bankrbot Morse-Code Prompt Injection, TrustedVolumes RFQ Proxy Drain, and 1inch Fusion V1 Settlement.
- Expanded exploit browsing and study coverage, so newer incidents are searchable, browsable, and tied into the real-world incident catalog more cleanly.
- Widgets now cover three experiences: Glossary, Exploits, and Checklist Progress.
- Updated widget functionality with manual rotation, a new Every 15 minutes rotation option, improved compact layouts, better deep links, and more reliable shared rotation state.
- Improved glossary and reference content, including new glossary terms and stronger deep links from widgets into full in-app content.
- Added more checklist and sharing polish, including hint-level share/copy support and better widget syncing for checklist progress.
- Refreshed references and learning content across chains, wallets, and security material so more of the catalog feels current and easier to browse.
1.9 14 May
• Glossary widgets — Review rotating security and developer terms from your Home Screen or Lock Screen.
• New real-world incident lessons — Added KelpDAO rsETH Bridge and Litecoin MWEB reorg exercises.
• Widget customization — Choose a domain, rotation cadence, text size, color, and minimal just-text presentation.
1.8 28 Apr
Memory exam card polish, plus new incident packs for Rhea Finance, Hyperbridge, Fortinet EMS, and wolfSSL (CVE-2026-5194). Expanded exercises, glossary entries, Solana material, Solidity EVM crypto snippets, and ZK proof content.
1.7 18 Apr
Deep Dive polish — Faster navigation, a new favorites shelf, smoother customization, and added contract links and papers.
Practice filters — Hide and reorder chips so it is easier to focus on the topics you want.
More real-world learning — New exploit content, glossary links, and refreshed security packs.
1.6 9 Apr
• **Operator profile** — Pick your callsign in onboarding. It appears in scenarios, War Rooms, and Stats.
• **Deep Dive Hub** — Home is now a launchpad. Curated tracks for Web2, Web3, Rust, ZK, and Trading. Recommended row based on your weak areas. Build your own from bookmarks or missed questions.
• **Memory-match exam** — New exam mode: flip cards and match terms across Opcodes, EIPs, Security Terms, DeFi, and more.
• **Glossary test** — Test yourself on term definitions in any domain directly from the Exam tab.
• **Safety checklists** — OpSec, Wallet & Web3, Protocol Reading, and Emergency Response checklists on Home.
• **Starred exploits** — Favorite incidents in Real World Exploits and jump back with a starred-only filter.
1.5 1 Apr
More real-world exploit exercises — New and refined incident-linked drills: USR, CoW-Swap, Solv, DBXen, Venus, and Aave CAPO.
Learning UX — ML, ZK Proofs, and Dev Concepts subdomain chips.
1.4 31 Mar
Free to download. Unlock all content with a one-time $4.99 purchase. Try Rust, Solidity, Exploits, and DeFi for free—no account required.
• Ops & War Rooms — Consequence-based narrative sessions: Thriller mode (limited lives, story-driven) and War Room (real-incident timeline simulations). Earn scenario badges.
• Bitcoin domain — First-class domain with subdomain filters: Basics, Script, Consensus, Lightning & L2.
• Protocol Patterns — DeFi architecture reference in More tab. Practice patterns with tagged questions.
• EIP Atlas — Searchable standards (ERC-20/721/4626, ERC-4337, EIP-712, etc.). "Practice this EIP" routes to tagged questions.
• Real World Exploits browse — Searchable incidents list. Tap row → detail → practice with full incident sessions.
• Solidity antipatterns — Dedicated snippet set, EIP antipatterns field.
• Trading Strategies subdomain chips — Arbitrage, Market Making, MEV, Execution, Risk Management.
• Web2 exploits — Log4Shell, Heartbleed, SolarWinds, buffer overflows, path traversal, SSRF.
• Cryptography subdomain — New Cybersecurity chip for crypto-focused practice.
• Assembly / Yul — Solidity subdomain for inline assembly questions.
• Rust Performance — New subdomain chip and gap-fill content.
1.3 24 Mar
Free to download. Unlock all content with a one-time $4.99 purchase. Try Rust, Solidity, Exploits, and DeFi for free - no account required.
• Subdomain filters - Filter by topics like Reentrancy, Oracle, and Basics in Rust, Solidity, DeFi, and Exploits.
• New questions & real exploits - Aave + CoW Swap (~$50M), Aave wstETH CAPO (~$26M), Cetus Protocol ($223M, Sui), KiloEx oracle, and more. "In the wild" callouts link each exploit to verified incidents.
• Spaced repetition - Questions you miss are resurfaced at intervals to strengthen weak areas.
• Premium onboarding - Premium users can select ZK Proofs during onboarding.
1.2 18 Mar
• On-chain feedback — Submit feedback via WalletConnect (Base or Ethereum). View your feedback on block explorers.
• Stats badges — See all tier badges (Pro, Expert, Zero Day Master), domain certifications, and achievements with lock/unlock state.
• Lightning Round — Now interactive-only (tap, swipe, drag, match) with up to 50 questions per run.
• New content — 9 new domains (cybersecurity, DeFi, trading, ZK proofs, and more) plus Snowden, Wireshark, and trading questions.
• Bookmarks — Quick "Practice bookmarked" flow from saved questions.
• UX hints — Code wrap and Glossary tips when you need them.
1.1 16 Mar
- Learn multiparty computation (MPC) from the basics to advanced review with examples, threshold signatures, recovery scenarios and a treasury capstone.
- Explore AI Home Lab guides for building and fine-tuning language models, plus Jev, Altar-1 and updated models.
- Build stronger foundations in networking, distributed systems, market making, options and machine learning with expanded guided practice.
- Understand private Ethereum transaction routing and find HSMs and TEEs together under Systems & Cloud Security.
more Version 3.0 2 days ago
Data Not Collected The developer does not collect any data from this app.