web3-audit

Audit Solidity or Rust smart contracts for 10 DeFi bug classes.

Updated Jul 1, 2026

Search Tags:#security audit #bug detection #DeFi #smart contract #smart contract audit

Ready to run

npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill web3-audit-bpnrockstar

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/bpnrockstar/UnifiedBugHunter/tree/main/skills/web3-audit
Command: npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill web3-audit-bpnrockstar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a comprehensive security audit for smart contracts, identifying vulnerabilities and potential risks in DeFi protocols.

Core Features & Use Cases

Bug Class Identification: Identifies 10 DeFi-specific bug classes.
Pre-Dive Kill Signals: Flags contracts that are unlikely to have bugs.
Foundry PoC Template: Offers a template for creating Proof of Concepts.
Grep Patterns: Provides grep patterns for each bug class.
Real Paid Examples: Includes examples from real-world paid audits.

Quick Start

Run the web3-audit skill on your Solidity/Rust smart contract to automatically detect vulnerabilities.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I conduct a smart contract security audit for DeFi protocols?▼

Conduct a smart contract security audit by using targeted grep patterns for manual code review to identify 10 specific DeFi bug classes, flagging pre-dive kill signals, and generating Foundry Proof of Concepts to verify vulnerabilities.

What are pre-dive kill signals in a smart contract audit?▼

Pre-dive kill signals are indicators flagged during a smart contract audit that identify contracts unlikely to contain bugs, allowing auditors to skip deep manual review and focus their grep pattern searches on higher-risk code.

Do I need Solidity or Rust knowledge to audit smart contracts?▼

Yes, you need Solidity or Rust knowledge to perform this smart contract audit. The process requires manual code review using grep patterns to detect DeFi protocol vulnerabilities and generate Proof of Concepts.

How do I create a Proof of Concept for a smart contract vulnerability?▼

Create a Proof of Concept for a smart contract vulnerability by using the provided Foundry PoC template, which allows you to validate and demonstrate the impact of the DeFi bug classes identified during your grep pattern manual review.

What is the best way to detect DeFi bug classes in smart contracts?▼

The best way to detect DeFi bug classes is through manual code review using specific grep patterns tailored for each of the 10 vulnerability categories, supplemented by real paid audit examples to guide the security analysis.