security

Review Solidity smart contracts for vulnerabilities and pre-deployment security issues.

10|1|Updated Mar 19, 2025

Search Tags:#security #auditing #vulnerabilities #smart contracts #solidity #defi

Ready to run

npx skills add https://github.com/ObolNetwork/obol-stack --skill security-obolnetwork

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/ObolNetwork/obol-stack/tree/main/internal/embed/skills/security
Command: npx skills add https://github.com/ObolNetwork/obol-stack --skill security-obolnetwork

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides essential knowledge and practical code patterns to prevent common and critical vulnerabilities in Solidity smart contracts, safeguarding against financial losses and exploits.

Core Features & Use Cases

Vulnerability Identification: Details common attack vectors like reentrancy, decimal mishandling, and oracle manipulation.
Defensive Coding Patterns: Offers concrete Solidity code examples for mitigating these risks.
Pre-Deploy Checklist: A comprehensive guide to ensure contracts are secure before deployment.
Use Case: Before deploying a new DeFi protocol, use this Skill to review the code for known vulnerabilities and implement the recommended security patterns, ensuring robust protection for user funds.

Quick Start

Review the provided security checklist to ensure all critical smart contract vulnerabilities are addressed before deployment.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I prevent reentrancy attacks in Solidity smart contracts?▼

To prevent reentrancy attacks in Solidity smart contracts, apply defensive coding patterns such as the checks-effects-interactions pattern and mutex locks. This Skill provides concrete code examples to secure contract state updates before external calls.

What are the most common DeFi smart contract vulnerabilities I should check before deployment?▼

Common DeFi smart contract vulnerabilities include reentrancy, token decimal mishandling, oracle manipulation, and access control flaws. This Skill details these attack vectors and provides a pre-deployment audit checklist to identify and mitigate them.

How does oracle manipulation affect smart contract security?▼

Oracle manipulation affects smart contract security by allowing attackers to artificially skew price feeds, causing incorrect asset valuations. This Skill explains the mechanism and offers defensive coding patterns to secure protocols relying on external data.

Can I use this to audit an existing DeFi protocol for token decimal variations?▼

Yes, you can use this to audit DeFi protocols for token decimal variations. It provides comprehensive guidance on identifying decimal mishandling vulnerabilities and implementing defensive code patterns to ensure accurate token accounting.

What is the best way to implement access control in Solidity?▼

The best way to implement access control in Solidity is by using standardized role-based patterns and modifiers to restrict function execution. This Skill offers practical security best practices and code examples for robust access control mechanisms.

What should be on a smart contract pre-deployment security checklist?▼

A smart contract pre-deployment security checklist should verify reentrancy guards, token decimal handling, oracle integrity, and access controls. This Skill provides a comprehensive checklist to ensure critical vulnerabilities are addressed before deployment.