web3-audit

To audit a Solidity smart contract for DeFi vulnerabilities, use this Skill to classify issues across 10 bug classes including reentrancy, oracle manipulation, and flash loan attacks. It provides Foundry PoC templates and grep patterns to reproduce findings and frame remediation steps.

The most common DeFi smart contract bug classes include accounting desync, access control, incomplete path, off-by-one, oracle, ERC4626, reentrancy, flash loan, signature replay, and proxy issues. These 10 categories cover the primary vulnerability patterns in decentralized finance protocols.

To write a Foundry PoC for smart contract vulnerabilities, use the provided Foundry PoC templates to reproduce findings and validate mitigations. These templates integrate with grep patterns to classify issues and map attack surfaces during security audits.

Yes, you can use web3-audit for Rust smart contracts. The vulnerability identification and prioritization process applies to both Solidity and Rust contracts, guiding pre-dive analysis, pattern matching, and template-driven testing across DeFi protocols.

Yes, web3-audit requires Foundry-based workflows to reproduce findings and validate mitigations. The Skill provides grep patterns and PoC templates that depend on Foundry to classify issues and map attack surfaces during DeFi protocol audits.

To filter low-signal targets before a DeFi security audit, apply pre-dive kill signals such as TVL thresholds and audit recency checks. This quickly filters out low-value targets, allowing auditors to focus on high-priority contracts.