austintgriffith/evm-audit-skills

1

evm-audit-master Master index for EVM smart contract security audit skills. Load this FIRST for every audit to determine which special…

austintgriffith/evm-audit-skills

7

2

evm-audit-general General Solidity/EVM security checklist — non-obvious footguns that apply to every smart contract. Covers external ca…

austintgriffith/evm-audit-skills

6

3

evm-audit-access-control EVM smart contract audit checklist for non-obvious access control issues. Covers centralization risks, privilege esca…

austintgriffith/evm-audit-skills

5

4

evm-audit-erc20 Weird ERC20 token edge cases that break protocols. Covers fee-on-transfer, rebasing, missing return values, blocklist…

austintgriffith/evm-audit-skills

5

5

evm-audit-oracles Oracle vulnerabilities including Chainlink staleness, minAnswer/maxAnswer circuit breakers, L2 sequencer uptime, TWAP…

austintgriffith/evm-audit-skills

5

6

evm-audit-precision-math Precision loss, rounding errors, division ordering, fixed-point math, and mathematical edge cases in Solidity. Load t…

austintgriffith/evm-audit-skills

5

7

evm-audit-signatures Signature vulnerabilities including cross-chain replay, ecrecover pitfalls, EIP-712 domain separator issues, permit e…

austintgriffith/evm-audit-skills

5

8

evm-audit-defi-lending CDP, lending market, liquidation, and borrowing vulnerabilities. Covers collateral handling, health factors, auction …

austintgriffith/evm-audit-skills

4

9

evm-audit-defi-staking Liquid staking derivatives (stETH, rETH, cbETH, sfrxETH), LRTs, restaking, staking rewards, and yield farming vulnera…

austintgriffith/evm-audit-skills

4

10

evm-audit-dos EVM smart contract audit checklist for denial-of-service and griefing attacks. Covers gas griefing, unbounded loops, …

austintgriffith/evm-audit-skills

4

11

evm-audit-governance DAO governance vulnerabilities including flash loan voting, proposal execution ordering, timelock bypass, fake propos…

austintgriffith/evm-audit-skills

4

12

evm-audit-proxies Proxy and upgrade vulnerabilities including UUPS, transparent proxy, beacon proxy, storage collisions, metamorphic co…

austintgriffith/evm-audit-skills

4

13

evm-audit-assembly Inline assembly, CREATE/CREATE2, EXTCODESIZE, and low-level opcode vulnerabilities. Covers metamorphic contracts, con…

austintgriffith/evm-audit-skills

3

14

evm-audit-bridges Cross-chain bridge vulnerabilities for LayerZero V2, Chainlink CCIP, Wormhole, Across, and general bridge security. C…

austintgriffith/evm-audit-skills

3

15

evm-audit-chain-specific Chain-specific EVM quirks for Arbitrum, Optimism, Base, zkSync, Blast, BNB, Berachain and other L2s. Covers block.num…

austintgriffith/evm-audit-skills

3

16

evm-audit-defi-amm AMM-specific vulnerabilities including Uniswap V3/V4 hooks, concentrated liquidity, swap routing, TWAMM, slippage, an…

austintgriffith/evm-audit-skills

3

17

evm-audit-erc4337 Account abstraction (ERC-4337) vulnerabilities including wallet factories, paymaster replay, session keys, EntryPoint…

austintgriffith/evm-audit-skills

3

18

evm-audit-erc4626 ERC4626 vault standard vulnerabilities including inflation attacks, rounding direction, share price manipulation, fir…

austintgriffith/evm-audit-skills

3

19

evm-audit-erc721 EVM smart contract audit checklist for ERC721/ERC1155 tokens. Covers weird NFT behaviors, dual-standard tokens, wrapp…

austintgriffith/evm-audit-skills

3

20

evm-audit-flashloans EVM smart contract audit checklist for flash loan attack patterns. Covers flash loan governance attacks, oracle manip…

austintgriffith/evm-audit-skills

3