🚀 I Want to Become a StarkNet/Cairo Auditor — Here’s My Starting Point & I’d Love a Roadmap

Honestly, I made this switch last year (EVM → StarkNet/Cairo), and the biggest shock for me was realizing Cairo is not “Solidity but different.” It’s a totally different mental model. The sooner you drop EVM assumptions, the easier the transition becomes. What helped me the most:

I spent the first 2–3 weeks just trying to understand how the Cairo VM thinks. Memory segments, builtins, implicit args… all of that felt super confusing at first. Once that clicked, the language suddenly felt way more logical.

Storage was another area where I kept messing up. Cairo storage + StarkNet’s model is nothing like Solidity mappings. Stuff like LegacyMap, how storage keys get computed, how account contracts work by default… I kept running into weird bugs until I really sat down and studied how StarkNet handles state.

Vulnerabilities are also different. A lot of the typical Solidity issues don’t even show up here, but weird Cairo-specific stuff appears instead — incorrect u256 handling, unsafe constructors, hint-related surprises, map key mistakes, people assuming upgradeability works like EVM proxies… I learned most of this by reading audit reports from Lambdaclass and Nethermind and trying to reproduce their findings.

What really pushed me forward was picking a few Cairo repos and doing small self-audits. I did an OZ account contract, then a small AMM someone built in Cairo, and one NFT project. Writing those findings down like a real audit was honestly more valuable than any tutorial. Tooling-wise: Scarb, StarkNet Foundry, Starkli — get comfortable with these. They’ll save you weeks.

And if you’re not already in the StarkNet Discord and the Lambdaclass repos… join them. StarkNet is tiny compared to EVM, people actually answer your questions, and you see stuff break in real time, which is weirdly helpful. If you stick with it for a few months after your Cyfrin course, you’ll be ahead of most people. There just aren’t many Cairo auditors yet.

If you want, I can share what I’d skip/avoid too — I wasted time on a few things early on that didn’t matter.

@CryptoSagePriya Really appreciate your breakdown — it clears up a lot. You mentioned there were things you’d skip or avoid when learning Cairo. I’d love to know what those were so I don’t waste time on the wrong stuff.