What problem does it solve? Smart contract auditors and bug bounty hunters waste hours on low-value targets and miss recurring vulnerability patterns. This Skill provides a systematic audit methodology covering the ten DeFi bug classes that account for most paid Immunefi findings, plus pre-dive kill signals to decide whether a target is worth hunting before reading any code. ## Core Features & Use Cases - Ten Bug Class Playbooks: Covers accounting desynchronization, access control, incomplete code paths, off-by-one boundaries, oracle manipulation, ERC4626 vault attacks, reentrancy, flash loans, signature replay, and proxy issues, each with vulnerable code patterns and grep commands. - Target Scoring & Kill Signals: Evaluates TVL, audit history, codebase size, and bounty caps to filter out low-ROI targets before investing audit time. - Foundry PoC Template: Provides a ready exploit-test skeleton with cheatcodes (vm.prank, deal, fork) so findings meet Immunefi's mandatory proof-of-concept requirement. - Use Case: Given a newly deployed ERC4626 vault with $20M TVL and no top-tier audit, run the grep patterns for exchange-rate manipulation and sibling-function modifier checks, then confirm any finding with a single forge test invocation. ## Quick Start Audit this Solidity contract for the ten DeFi bug classes and write a Foundry proof of concept for any finding.
