web3-audit

Audit Solidity smart contracts for vulnerabilities using a 10-bug-class framework with grep patterns and Foundry PoC templates.

Updated Jun 5, 2026
One-click install
npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill web3-audit-sseshachala
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/sseshachala/Claude-BugHunter-archive/tree/main/skills/web3-audit
Command: npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill web3-audit-sseshachala

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Smart contract audits in Web3 are complex and error-prone; this skill provides a structured framework to detect 10 bug classes, reduce audit time, and improve remediation quality.

Core Features & Use Cases

  • 10 bug classes coverage with practical guidance and examples.
  • Pre-dive kill signals to triage engagements and prune risky targets.
  • Foundry PoC template for reproducible PoCs and testing.
  • Grep-pattern templates to locate class patterns across codebases.
  • Real Immunefi paid examples to calibrate impact and prioritization.

Quick Start

Run the Foundry PoC template against your Solidity project to surface the 10 bug classes and ready a PoC for disclosure.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit smart contracts for common Web3 security vulnerabilities?

To audit smart contracts for Web3 security vulnerabilities, apply a structured 10-bug-class framework to surface critical issues early in DeFi protocols, on-chain governance, and NFT marketplaces. This approach uses grep patterns to locate class patterns across codebases.

What is the best way to write a Foundry PoC for a Solidity smart contract exploit?

The best way to write a Foundry PoC for a Solidity exploit is to use a prebuilt Foundry PoC template that helps surface the 10 bug classes and readies a reproducible proof of concept for disclosure and remediation.

How do real Immunefi bug bounty examples calibrate smart contract vulnerability severity?

Real Immunefi bug bounty examples calibrate smart contract vulnerability severity by providing practical guidance that helps auditors prioritize discovery, gauge impact, and improve remediation quality across Web3 projects.

Can I use grep patterns to triage risky Solidity codebases before a full audit?

Yes, you can use grep-pattern templates to locate specific vulnerability class patterns across Solidity codebases, acting as pre-dive kill signals to effectively triage engagements and prune risky targets before committing to a full audit.

Does this security audit framework work for both DeFi protocols and NFT marketplaces?

Yes, this security audit framework applies directly to both DeFi protocols and on-chain governance systems, as well as NFT marketplaces, identifying common vulnerabilities using its structured 10-bug-class coverage.

Why should I use a structured bug class framework instead of ad-hoc smart contract security checks?

A structured bug class framework reduces smart contract audit time and improves remediation quality by preventing error-prone ad-hoc checks, ensuring consistent coverage of 10 critical vulnerability classes with practical examples.