web3-audit

Identify DeFi smart contract vulnerabilities across 10 bug classes with Foundry PoCs.

Updated May 31, 2026

Search Tags:#vulnerability #web3 #foundry #defi #security-audit #smart-contract #immunefi

Ready to run

npx skills add https://github.com/grivera82/pi-bughunter --skill web3-audit-grivera82

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/grivera82/pi-bughunter/tree/main/skills/web3-audit
Command: npx skills add https://github.com/grivera82/pi-bughunter --skill web3-audit-grivera82

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Smart contract security auditing for DeFi protocols; it provides a structured framework to identify and classify vulnerabilities across ten bug classes, with pre-dive kill signals and practical PoC templates.

Core Features & Use Cases

Ten bug classes with pre-dive kill signals and a Foundry PoC template for reproducible tests.
Grep patterns and reference implementations to speed up triage and validation.
Use Case: assess a DeFi target's risk posture and prepare Immunefi-ready PoCs and reports.

Quick Start

Run the Foundry PoC template against a sample Solidity project to begin an end-to-end audit workflow.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify common DeFi smart contract vulnerabilities before writing a report?▼

To identify DeFi smart contract vulnerabilities, the toolkit provides pre-dive kill signals and grep patterns to scan Solidity projects across ten bug classes, enabling rapid triage and risk assessment.

How do I create a reproducible Foundry PoC for a smart contract security audit?▼

You create a reproducible Foundry PoC for a smart contract security audit by applying the included Foundry PoC template and test harnesses to demonstrate vulnerabilities within your Solidity projects.

Can I use this toolkit to prepare Immunefi submission reports for DeFi protocols?▼

Yes, you can prepare Immunefi submission reports for DeFi protocols by utilizing the transferable PoC templates and structured vulnerability classification framework to document reproducible findings.

Does this DeFi security audit workflow require specific tooling or environments?▼

Yes, this DeFi security audit workflow requires Foundry tooling and existing Solidity projects to run the end-to-end vulnerability detection and reproducible test harnesses effectively.

What is the best way to scan large DeFi protocols for smart contract security flaws?▼

The best way to scan large DeFi protocols for smart contract security flaws is using targeted grep patterns and pre-dive kill signals to quickly assess risk posture across ten bug classes.