04 Foundations
03 Practitioner
03 Contract red flags
05 Forensics & OSINT
05 Hunter's track
THE PREMISE
Most Crypto Losses Are Not Hacks
They are powers somebody did not read, and randomness nobody could check.
In July 2026 an attacker drained around a hundred and sixteen million dollars from hardware wallets — devices bought specifically to prevent that. No phishing link, no malware, no stolen password. A build configuration error in a firmware release from 2021 made one function pick numbers badly, and for five years those wallets looked exactly like secure wallets.
That is what this course is about. Not exotic cryptographic breaks, which essentially never happen, but the four layers where money actually goes: a build setting, a missing constraint, an unrevoked permission, and a signature somebody approved without reading.
What makes this differentEvery class is built on a documented failure with the mechanism laid out in full — Netscape 1996, the 2012 internet-wide key scan, The DAO, Parity, Ronin, Coldcard 2026. A student who half-understands an attack cannot defend against it, so nothing is summarised into uselessness.
It is taught from four standard texts rather than from blog posts: Serious Cryptography for the mathematics, Mastering Bitcoin and Mastering Ethereum for how the systems actually work, and Attack of the 50 Foot Blockchain as the adversarial counterweight — because a security course taught only from technical manuals produces students who understand mechanisms and still get robbed.
TIER 1
FoundationsPublished & narrated
For anyone who owns crypto. No technical background assumed.
What a seed phrase, a key and an address really are, how integrity is proved, and what a signature does and doesn't commit you to.
TIER 2
PractitionerPublished & narrated
For active users. Assumes Tier 1.
How wallets are built and attacked, reading what you're really signing, and the approvals that can empty a wallet without anyone breaking in.
TIER 3
Smart Contract Red FlagsPublished & narrated
Reading contracts for danger, without being a developer.
The warning signs written into a token contract before you buy, and the known exploit classes behind the largest protocol losses.
TIER 4
On-Chain Forensics & OSINTPublished & narrated
Following stolen funds, pivoting off-chain, and the ethical line that keeps it forensics.
The investigator's method: tracing funds hop by hop, clustering and attribution, off-chain research under strict rules, and reporting a theft so it gets acted on.
TIER 5
The Hunter's Track & MasteryNot yet published
Hunting an operation end to end, judging the people who hold your money, and an introduction to authorised security testing.
Mapping a scam operation, due diligence on projects, chains and bridges, an introduction to authorised crypto penetration testing, and a capstone.
FORMAT
How The Classes Work
Written to be understood, not to sound expert.
- A moving picture for every idea. Animated diagrams that make an argument — watch a keyspace collapse from 128 bits to 47, or a nine-signer quorum resolve into one real party.
- Narrated. Each published class carries an audio track, section by section, with speed control — Every class runs five to seven minutes of narration across five sections. Listen while commuting or read at a desk.
- Questions and answers at the end. Ten per class, mixing factual recall with diagnosis and scenarios. Answers explain why, not just what.
- Beginners first, without dilution. Each concept opens in plain language and then goes to real depth. The mathematics appears where it matters and is always followed by what it means.
Access. The Crypto Cyber Security curriculum is for CryptoLwa members, alongside the research desks.
See membership — or start with the free Foundations classes, like
Crypto Basics, which are open to everyone.
← Back to the Academy