reentrancy-analysis

What problem does it solve?

This skill identifies and analyzes reentrancy surfaces in Aptos Move modules, focusing on dynamic dispatch vectors, closures, and dispatchable hooks to prevent cross-module security issues.

Core Features & Use Cases

• Dynamic dispatch point inventory: detects function-typed parameters, closures, and move closures that enable callbacks.
• Module lock and surface analysis: assesses #[module_lock] presence and its coverage against direct and indirect reentrancy.
• State ordering checks: applies check-effect-interaction reasoning to identify potential inconsistent reads/writes during reentrancy.
• Dispatchable FungibleAsset hooks evaluation: analyzes withdraw/deposit/balance hooks for external code execution risks.
• Third-party lock bypass assessment: evaluates reliance on external locks and potential bypass paths.
• Practical use cases include auditing Aptos Move modules for vulnerable patterns in financial transfers, NFT hooks, and governance modules.

Quick Start

Run the reentrancy-analysis skill against your Aptos Move modules to enumerate dynamic dispatch points, assess reentrancy risks, and generate mitigation steps.