vault-erc4626

Analyze ERC4626 tokenized vaults for inflation attacks, rounding errors, and donation exploits.

60|18|Updated Jan 21, 2026
One-click install
npx skills add https://github.com/PurpleAILAB/Vigilo --skill vault-erc4626
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vault-erc4626
Source: https://github.com/PurpleAILAB/Vigilo/tree/main/packages/opencode/skills/vault-erc4626
Command: npx skills add https://github.com/PurpleAILAB/Vigilo --skill vault-erc4626

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a comprehensive guide and checklist for auditing ERC4626 tokenized vaults, helping to identify and mitigate critical vulnerabilities that could lead to significant financial loss.

Core Features & Use Cases

  • Vulnerability Identification: Detects common attack vectors like inflation attacks, donation attacks, and rounding errors.
  • Mitigation Strategies: Offers proven patterns and code examples for securing ERC4626 vaults.
  • Audit Checklist: Provides a structured checklist to ensure all critical aspects of an ERC4626 vault are reviewed.
  • Use Case: An auditor can use this Skill to systematically check an ERC4626 vault implementation for known exploits before deployment, ensuring the safety of user funds.

Quick Start

Use the vault-erc4626 skill to audit the provided ERC4626 vault contract for inflation vulnerabilities.

Frequently Asked Questions about vault-erc4626

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit an ERC4626 vault for inflation attacks?

To audit an ERC4626 vault for inflation attacks, analyze the deposit and share calculation logic for vulnerabilities where early attackers can manipulate the exchange rate. This Skill provides root cause analysis, detection methods, and mitigation strategies specifically targeting inflation exploits in tokenized vaults.

What security vulnerabilities are common in ERC4626 tokenized vaults?

Common security vulnerabilities in ERC4626 tokenized vaults include inflation attacks, donation exploits, and rounding errors. This Skill helps identify these critical DeFi vulnerabilities by providing detailed explanations of root causes and detection methods for smart contract auditors.

How do I secure an ERC4626 vault against donation exploits?

To secure an ERC4626 vault against donation exploits, you need to implement proven mitigation patterns that prevent direct asset transfers from skewing share prices. This Skill offers specific code examples and mitigation strategies to protect vaults from donation-based manipulation.

Does the ERC4626 audit checklist cover ERC-7540 async vaults?

Yes, the ERC4626 audit checklist covers ERC-7540 async vaults alongside standard tokenized vaults. It provides a structured checklist to systematically review all critical aspects of ERC-7540 implementations for known exploits before deployment.

What is the best way to check a DeFi vault for rounding errors?

The best way to check a DeFi vault for rounding errors is to systematically audit the mathematical operations in the vault's deposit and withdrawal functions. This Skill provides a comprehensive audit checklist to detect rounding errors and other exploits in ERC4626 vault implementations.