Someone wanted to learn this too, so Grasp built them a personal learning path.
You can keep exploring this one or create a path like this one shaped around you.
Recommended resources
Module 2
Native Program Development Essentials
Module 3
Program Derived Addresses and CPI
Module 4
Working with the SPL Token Standard
Module 5
Anchor Framework and TypeScript for PoCs
Module 6
Core Security: Account Validation Exploits
Module 7
Core Security: Logic, Math, and Authorization Flaws
Module 8
Advanced Exploits: CPI and Composition Attacks
Module 9
Common DeFi Exploit Patterns
Module 10
Security Auditing: Tooling and Process
Module 11