smart-contract-vulnerabilities

To audit Solidity contracts for reentrancy and access control flaws, analyze external call paths for recursive exploitation and verify privilege enforcement. This identifies risky code paths and provides mitigations for secure remediation.

Common smart contract exploit patterns involving proxy security and delegatecall include storage collisions and fragile proxy layouts. Auditing these architectures identifies unsafe patterns and insecure design assumptions before deployment.

Signature replay and on-chain randomness manipulation affect EVM smart contracts by allowing attackers to bypass authorization or predict outcomes. Auditing identifies these insecure assumptions and recommends verification steps for secure remediation.

Yes, this Skill detects flash-loan-sensitive logic and MEV exposure by analyzing transaction-ordering attacks and oracle-dependent logic. It identifies scenarios where attackers can manipulate prices or front-run transactions.

The best way to find delegatecall storage collisions in proxy architectures is to review storage layouts for mismatched variable ordering. This audit process identifies fragile proxy designs and recommends mitigations.

Limitations when auditing token and ETH handling include detecting force-send ETH vulnerabilities that bypass contract logic via selfdestruct. The audit identifies these edge cases but requires test cases to verify secure remediation.