vuln-web3-restaking

Scan blockchain codebases for restaking and AVS vulnerabilities and report findings to vulnerabilities.md.

Updated Jun 23, 2024
One-click install
npx skills add https://github.com/n4igme/randscript --skill vuln-web3-restaking
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vuln-web3-restaking
Source: https://github.com/n4igme/randscript/tree/main/llm/skills/scode/vuln-web3-restaking
Command: npx skills add https://github.com/n4igme/randscript --skill vuln-web3-restaking

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security researchers identify vulnerabilities in restaking protocols (AVS, operator delegation, slashing, and withdrawal queues) and supports structured reporting.

Core Features & Use Cases

  • Threat modeling guidance for restaking architectures including operator, delegator, AVS, and slasher roles
  • Pattern-based scanning prompts and recommended grep patterns to locate restaking vulnerabilities
  • Structured reporting workflow to append findings to vulnerabilities.md

Quick Start

Analyze the codebase with the threat-model template and run the restaking scanner to append findings to ./assessment/vulnerabilities.md

Frequently Asked Questions about vuln-web3-restaking

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find restaking vulnerabilities in a Solidity codebase?

You can identify AVS security flaws by applying threat-modeling guidance to operator, delegator, AVS, and slasher roles, then running pattern-based scanning to detect delegation and slashing weaknesses.

What restaking components does this threat modeling scanner check?

This threat modeling scanner checks restaking components including operator and delegator roles, AVS registration, slasher mechanisms, and withdrawal workflows to locate protocol weaknesses.

Does this restaking security scanner work with liquid staking protocols?

Yes, this restaking security scanner works with liquid staking protocols that implement operator and delegator roles alongside AVS components and withdrawal queues.

How are detected AVS and slashing vulnerabilities reported?

Detected AVS and slashing vulnerabilities are reported by appending structured Markdown findings to an assessment file named vulnerabilities.md.

What codebase patterns are required to scan for withdrawal queue weaknesses?

Scanning for withdrawal queue weaknesses requires codebases to contain searchable patterns for slashing, delegation, AVS, and withdrawal features to successfully identify restaking flaws.