defi-attack-patterns

Analyze DeFi protocols for flash loan, oracle, and governance attack patterns.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/bingook/bingo --skill defi-attack-patterns-bingook
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: defi-attack-patterns
Source: https://github.com/bingook/bingo/tree/main/bingo/skills/hack-skills/defi-attack-patterns
Command: npx skills add https://github.com/bingook/bingo --skill defi-attack-patterns-bingook

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps analyze DeFi protocols by identifying potential vulnerabilities like flash loan attacks, price oracle manipulation, and MEV sandwich attacks.

Core Features & Use Cases

  • Flash Loan Mechanism: Understand how flash loans can be used for various attacks and defenses.
  • Price Oracle Manipulation: Learn how spot price and TWAP can be manipulated in AMM markets.
  • Liquidity Pool Drain: Explore reentrancy and governance vulnerabilities in liquidity pools.
  • Governance Exploits: Identify and protect against flash loan governance attacks.
  • Bridge Exploits: Analyze common bridge vulnerabilities like signature verification bypass and replay attacks.

Quick Start

To begin, select 'defi-attack-patterns' from the skill menu.

Frequently Asked Questions about defi-attack-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify flash loan attacks in DeFi smart contracts?

To identify flash loan attacks in DeFi smart contracts, you analyze transaction behavior for exploited flash loan mechanisms that manipulate prices or drain liquidity pools within a single transaction.

What is price oracle manipulation in AMM markets?

Price oracle manipulation in AMM markets is an attack pattern where spot prices or TWAP values are artificially distorted to exploit decentralized finance protocols for profit.

How do I detect liquidity pool draining vulnerabilities?

You detect liquidity pool draining vulnerabilities by analyzing smart contract behavior for reentrancy exploits and governance weaknesses that allow unauthorized extraction of pooled assets.

Do I need to understand AMM mechanisms to analyze bridge vulnerabilities?

Yes, understanding AMM mechanisms and smart contracts is required to analyze bridge vulnerabilities like signature verification bypass and replay attacks effectively.

What are the common governance exploits in decentralized finance protocols?

Common governance exploits in decentralized finance protocols involve flash loan governance attacks where attackers borrow massive voting power temporarily to pass malicious proposals.

Can this analyze MEV sandwich attacks on liquidity pools?

Yes, this can analyze MEV sandwich attacks on liquidity pools by identifying transaction ordering exploits and price manipulation patterns within decentralized finance protocol behaviors.