> For the complete documentation index, see [llms.txt](https://docs.salusec.io/untitled/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.salusec.io/untitled/web3-penetration-test.md).

# Web3 Penetration test

- [Web3 Penetration Test Overview](https://docs.salusec.io/untitled/web3-penetration-test/web3-penetration-test-overview.md): WEB3 penetration testing refers to the security testing of applications built using blockchain technology. The main goal is to find security vulnerabilities and provide repair suggestions.
- [Risks in GameFi](https://docs.salusec.io/untitled/web3-penetration-test/risks-in-gamefi.md): GameFi applications are considered high-risk areas for WEB3 penetration testing due to their large user base, diverse interaction scenarios, and the complexity of the games themselves.
- [Risks in DeFi](https://docs.salusec.io/untitled/web3-penetration-test/risks-in-defi.md): DeFi projects should not only pay attention to the vulnerabilities related to smart contracts, but the security risks related to non-smart contracts are also fatal to DeFi applications.
- [Risks in Cefi](https://docs.salusec.io/untitled/web3-penetration-test/risks-in-cefi.md): Penetration testing for CeFi platforms involves addressing information leakage, account security, system security, and business scenario security risks.
- [Risks in social media](https://docs.salusec.io/untitled/web3-penetration-test/risks-in-social-media.md): Decentralized blockchain products are prone to phishing attacks. Security issues in common crypto communication software require users to be more cautious.