web3-audit

Identifies DeFi bug classes in Solidity/Rust contracts using grep patterns and Foundry PoC templates.

1|Updated Jun 22, 2026
One-click install
npx skills add https://github.com/0xhaaz/bug-bounty-toolkit --skill web3-audit-0xhaaz
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/0xhaaz/bug-bounty-toolkit/tree/main/skills/web3-audit
Command: npx skills add https://github.com/0xhaaz/bug-bounty-toolkit --skill web3-audit-0xhaaz

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides in-depth security auditing expertise for smart contracts, identifying vulnerabilities across a range of DeFi bug classes and providing actionable audit strategies.

Core Features & Use Cases

  • DeFi Bug Class Analysis: Offers detailed analysis of 10 DeFi-specific bug classes, including accounting desync, access control issues, and reentrancy.
  • Pre-dive Kill Signals: Identifies 'kill signals' like low TVL or multiple top-tier audits to quickly determine if a contract is worth auditing.
  • Foundry PoC Template: Provides a template for creating Proof of Concepts using Foundry, a popular smart contract testing framework.
  • Grep Patterns: Includes grep patterns for each bug class to quickly identify potential vulnerabilities in the codebase.
  • Real Paid Examples: Features real-world examples from Immunefi and other platforms that demonstrate how vulnerabilities can be exploited and mitigated.

Quick Start

Run the web3-audit skill to audit a Solidity contract and identify common security vulnerabilities.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify DeFi security vulnerabilities in a smart contract?

To identify DeFi security vulnerabilities, this Skill analyzes 10 specific bug classes like accounting desync and reentrancy. It applies pre-dive kill signals and provides grep patterns to quickly inspect code for potential exploits.

How do I write a Proof of Concept for a smart contract exploit using Foundry?

You can write a Proof of Concept for a smart contract exploit using the Foundry testing framework by applying the provided PoC template. This template demonstrates how to replicate and verify vulnerabilities found during the DeFi audit process.

What are DeFi audit kill signals and when should I use them?

DeFi audit kill signals are indicators like low TVL or multiple top-tier audits that quickly determine if a contract is worth auditing. You should use them before a deep dive to efficiently allocate your smart contract security review time.

Can I use grep patterns to find reentrancy and access control issues in Solidity code?

Yes, you can use grep patterns to find reentrancy and access control issues in Solidity code. The Skill includes targeted grep patterns for each DeFi bug class to rapidly identify potential vulnerabilities within the codebase.

Do I need prior smart contract security expertise to audit DeFi protocols?

Yes, auditing DeFi protocols requires prior expertise in smart contract security, Foundry, and grep-based code inspection. The Skill is tailored for users evaluating Solidity or Rust contracts who already understand these auditing concepts.