defi-amm-security

To audit a Solidity AMM contract for reentrancy and oracle manipulation, use a security checklist that verifies Checks-Effects-Interactions ordering on swap functions, validates manipulation-resistant oracle usage, and reviews internal share math accounting to prevent donation and inflation attacks.

Security checks for liquidity pool deposit and withdrawal flows must verify slippage protection mechanisms, enforce access control on admin functions, and ensure share math is hardened against inflation attacks and donation exploits that drain pool reserves.

The Checks-Effects-Interactions pattern prevents AMM smart contract exploits by requiring all state changes and internal accounting updates to occur before any external token transfers, blocking reentrancy attacks from malicious swap or withdrawal callbacks.

Manipulation-resistant oracle usage in DeFi swap functions is needed whenever pool pricing relies on external price feeds, preventing attackers from artificially skewing spot prices within a single transaction to extract value from swaps or interconnected lending protocols.

Yes, this security checklist audits existing liquidity pool admin controls by verifying that access restrictions on privileged functions are properly enforced, preventing unauthorized parameter changes or emergency withdrawals that could compromise protocol integrity.

The best way to harden AMM share math against inflation attacks is implementing industry-standard secure patterns that lock initial liquidity deposits, validate share calculations against donation vectors, and ensure internal accounting strictly tracks legitimate depositor balances.