Smart Contract Security (EVM / Solidity)

SkillSecurity

Guide for EVM/solidity smart contract security work: vulnerability taxonomy, review workflow, and where to place resources in README.md.

Available today. Use it from your connected AI after setup.

Connect ahel once, and every AI you use reads what you have installed.

Then ask your AI: use the Smart Contract Security (EVM / Solidity) skill

What this skill tells your AI

The instructions your AI receives, as published by gmh5225/awesome-web3-security in .claude/skills/smart-contract/SKILL.md and read by ahel’s review.

Scope

Use this skill when working on:

  • Solidity/EVM auditing resources
  • EVM vulnerability categories and examples
  • Tooling for contract analysis (static, dynamic, fuzzing)

Common Vulnerabilities (Cheat Sheet)

  • Reentrancy
  • Access control bugs
  • Price oracle manipulation
  • MEV / sandwich / frontrunning
  • Flash loan enabled logic flaws
  • Precision / rounding / decimal mismatch
  • Signature and permit mistakes (EIP-2612 / Permit2)
  • Upgradeability mistakes (UUPS / Transparent)

Recommended Review Workflow

  1. Threat model: assets, trust boundaries, privileged roles
  2. State machine: invariants, transitions, edge cases
  3. Access control: ownership, roles, upgrade admin
  4. External calls: reentrancy, callback surfaces, token hooks
  5. Economic analysis: pricing, liquidity, oracle, incentives
  6. Testing: unit tests + fuzzing + invariant tests
  7. Reporting: severity, exploitability, PoC, remediation

Where to Add Links in README

  • New analyzers/fuzzers: Development → Tools or Security (choose primary)
  • Audit methodologies/standards: Security
  • Practice labs/CTFs: Security Starter Pack → CTFs / Practice
  • Audit report portfolios: Security Starter Pack → Audit Reports

Notes

Keep additions:

  • English descriptions
  • Non-duplicated URLs
  • Minimal structural changes

Data Source

For detailed and up-to-date resources, fetch the full list from:

https://raw.githubusercontent.com/gmh5225/awesome-web3-security/refs/heads/main/README.md

Signals

GitHub stars
22
Forks
5
Last commit
Aug 2026
Advanced
Catalog kind
skill
Gateway key
smart-contract-security
Source
github.com/gmh5225/awesome-web3-security