What problem does it solve?
This Skill identifies and mitigates risks associated with how smart contracts interact with external contracts and tokens, preventing vulnerabilities like fund loss, state desynchronization, and denial-of-service attacks.
Core Features & Use Cases
- Unchecked External Calls: Detects and flags instances where the success of low-level calls (
call, delegatecall, staticcall) is not verified, potentially leading to silent failures.
- Token Integration Vulnerabilities: Analyzes common pitfalls when integrating with ERC20 tokens, including fee-on-transfer, rebasing tokens, missing return values, and unsafe approval patterns.
- Use Case: When auditing a DeFi protocol that allows users to deposit arbitrary ERC20 tokens, this Skill can identify if the contract correctly handles tokens with hidden fees or unexpected behaviors, preventing the protocol from becoming insolvent.
Quick Start
Analyze the provided smart contract code for unsafe external call patterns and token integration vulnerabilities.