skills.rest
ajtazer
ajtazerCOMMUNITY
Explore all skills by this author →
Website𝕏@aj_tazerGitHub

web3-audit

Outline 10 DeFi smart-contract bug classes with Foundry PoC templates.

Updated Apr 8, 2026
Search Tags:#security#audit#vulnerabilities#foundry#defi#smart-contract#grep-patterns
One-click install
npx skills add https://github.com/ajtazer/briyani-hunter --skill web3-audit-ajtazer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/ajtazer/briyani-hunter/tree/main/.gemini/skills/web3-audit
Command: npx skills add https://github.com/ajtazer/briyani-hunter --skill web3-audit-ajtazer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify and understand common DeFi smart-contract vulnerabilities before investing time in audits or hunts, focusing on accounting desync, access control flaws, incomplete paths, off-by-one, oracle, ERC4626, reentrancy, flash loan, signature replay, and proxy risks.

Core Features & Use Cases

  • 10 bug classes covered (accounting state desync, access control, incomplete path, off-by-one, oracle, ERC4626, reentrancy, flash loan, signature replay, proxy)
  • Pre-dive kill signals to guide engagement decisions
  • Foundry PoC template for reproducible testing
  • Grep patterns and practical checks to locate common vulnerabilities
  • Real Immunefi-paid examples to illustrate impact and remediation

Quick Start

Run the Foundry PoC workflow against a target contract and use the included grep-guided checks to start a DeFi smart-contract audit.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit DeFi smart contracts for common vulnerabilities?▼

To audit DeFi smart contracts, you can use a toolkit covering 10 bug classes with grep patterns and practical checks to locate vulnerabilities like accounting desync, reentrancy, and flash loan attacks across Solidity and Rust protocols.

What are the most common DeFi smart contract security vulnerabilities?▼

Common DeFi smart contract vulnerabilities include accounting state desync, access control flaws, incomplete paths, off-by-one errors, oracle manipulation, ERC4626 issues, reentrancy, flash loan attacks, signature replay, and proxy risks.

How do I write a Foundry PoC for a smart contract exploit?▼

You can write a Foundry PoC using included templates designed for reproducible testing, allowing you to validate discovered vulnerabilities against target contracts during a DeFi smart contract audit.

Can I use grep patterns to find reentrancy and flash loan vulnerabilities?▼

Yes, grep patterns are provided for each bug class to help locate common vulnerabilities like reentrancy and flash loan attacks by searching for specific code patterns in smart contract implementations.

Does this smart contract audit approach work for both Solidity and Rust?▼

Yes, the risk assessment and pattern-based detection checks apply to both Solidity and Rust audits of DeFi protocols, covering common attack surfaces across both languages.

What are pre-dive kill signals in a smart contract security audit?▼

Pre-dive kill signals are indicators that guide engagement decisions by helping you assess DeFi smart contract risk scoring before committing time to a full audit or bug hunt.

Related Skills

Explore More Software Engineering Skills→
cmndcntrlcybercmndcntrlcyber
3

web3-audit

Audit Solidity smart contracts for DeFi vulnerabilities and generate Foundry PoC templates.

Community
Advanced
Mikacr1138Mikacr1138
2

web3-audit

Identify and analyze DeFi smart contract vulnerabilities in Solidity and Rust audits.

Community
Advanced
chatbotkitchatbotkit
13

web3-audit

Identify Solidity smart contract vulnerabilities across DeFi protocols.

Official
Advanced
icartshicartsh
4

code-analyze

Analyze .NET solutions for code quality, security, and dependency issues.

Community
Advanced