smart-contract-vulnerabilities

What problem does it solve?

This Skill helps you systematically identify common smart contract vulnerability classes in Solidity/EVM code so you can prioritize fixes and reduce exploit risk.

Core Features & Use Cases

• Reentrancy coverage: Detect classic, cross-function, cross-contract, and read-only reentrancy patterns, including callback-induced stale-state issues.
• Arithmetic and safety checks: Assess overflow/underflow risks across Solidity versions, including unchecked{}, unsafe casting, assembly/ABI corner cases, and timelock wrapping.
• Auth, call semantics, and protocol attacks: Review access control pitfalls (tx.origin, delegatecall, unprotected initializers), randomness manipulation, signature replay, MEV/front-running exposure, selfdestruct force-send behavior, CREATE2 deterministic address abuse, and flash-loan manipulation.
• Practical hardening guidance: Provide mitigations such as CEI, reentrancy guards, nonce/chainId enforcement, TWAP/oracle best practices, commit-reveal with safeguards, and storage layout slot collision checks for proxies.

Quick Start

Use this skill to audit a Solidity contract named Vault.sol for reentrancy, overflow/underflow, access control, delegatecall, signature replay, and MEV risks, and then output a prioritized list of findings with recommended fixes.