blockchain-security

Analyze Solidity contracts for security flaws and DeFi exploit patterns.

3|1|Updated May 26, 2026
One-click install
npx skills add https://github.com/LeoWSY-hashblue/-communitytools-custom --skill blockchain-security-leowsy-hashblue
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: blockchain-security
Source: https://github.com/LeoWSY-hashblue/-communitytools-custom/tree/main/skills/blockchain-security
Command: npx skills add https://github.com/LeoWSY-hashblue/-communitytools-custom --skill blockchain-security-leowsy-hashblue

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyzes Solidity smart contracts to reveal storage misconfigurations, vulnerable patterns, and common DeFi exploit vectors for proactive security testing.

Core Features & Use Cases

  • Storage layout analysis: compute and verify slot mappings to detect misaligned storage between contracts.
  • Delegatecall & CREATE/CREATE2 assessment: detect risky delegatecalls and address-prediction issues to preempt exploits.
  • CTF-ready tooling: map known attack patterns to practical test scenarios for training and assessment.

Quick Start

Review a target contract's bytecode or source, compute storage slots, and simulate a delegated-call exploit on a local test environment.

Frequently Asked Questions about blockchain-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find storage layout misconfigurations in Solidity smart contracts?

To analyze Solidity smart contracts for security flaws, you can compute and verify storage slot mappings to detect misaligned storage between contracts. This reveals misconfigurations and vulnerable patterns for proactive security testing.

How does delegatecall create smart contract vulnerabilities?

Delegatecall creates smart contract vulnerabilities by executing logic in the caller's storage context. Analyzing Solidity contracts helps detect risky delegatecalls and assess storage layout mapping to preempt delegatecall exploit patterns.

Can I use contract analysis for blockchain security CTF challenges?

Yes, you can use contract analysis for blockchain security CTF challenges. It maps known DeFi attack patterns to practical test scenarios, providing CTF-ready tooling for training and assessment on local test environments.

What is the best way to predict CREATE2 addresses for exploit testing?

The best way to predict CREATE2 addresses for exploit testing is to analyze Solidity source or bytecode directly. This detects address-prediction issues and enforces CREATE/CREATE2 assessment within secure testing workflows.

Does smart contract analysis work on both source code and bytecode?

Yes, smart contract analysis works on both source code and bytecode. It reviews target contracts to identify security flaws, misconfigurations, and common DeFi exploit vectors across both representations for comprehensive security hardening.