Detect business logic vulnerabilities in smart contract code.
npx skills add https://github.com/PurpleAILAB/Vigilo --skill logic-error
Please help me install this Agent Skill. Skill: logic-error Source: https://github.com/PurpleAILAB/Vigilo/tree/main/packages/claude/skills/vulnerability-patterns/logic-error Command: npx skills add https://github.com/PurpleAILAB/Vigilo --skill logic-error
This Skill identifies critical vulnerabilities in smart contract code stemming from logical errors, such as incorrect arithmetic operations, rounding issues, and improper handling of edge cases, which can lead to significant financial losses.
Analyze the provided smart contract code for potential logic errors.
High-intent search queries and answers about installing and using this skill.
Detecting logic flaws involves tracing arithmetic operations and checking for patterns like division before multiplication, first depositor attacks, precision loss, and unchecked block overflows.
A first depositor attack is a vault inflation exploit where an early user manipulates token shares. You check for it by verifying rounding and edge case handling during initial deposits.
Auditing smart contracts for rounding issues requires tracing calculation flows to identify risks like division before multiplication, which causes precision loss and incorrect arithmetic results.
Yes, you can scan for unchecked block overflows by mapping arithmetic operations and applying detection patterns to verify if edge cases are mishandled within the smart contract logic.
Yes, it identifies fee bypass vulnerabilities by analyzing business logic flaws and improper operation ordering, providing verification questions to help auditors confirm the exploit risks.
Automated logic error detection focuses on known historical exploit patterns like arithmetic errors and rounding issues, but requires manual auditor verification to confirm contextual business logic risks.
SperaxExplains how to read and interpret smart contracts on blockchain explorers.
Ramprasad4121Compare smart contract code against specification documents and classify divergences.
telihaAudit Solidity smart contracts for security vulnerabilities and generate Markdown reports.
multiversxGenerate property-based fuzz tests for MultiversX Rust smart contracts.
