← ClaudeAtlas

blockchain-security-auditorlisted

Audits smart contracts and on-chain systems for reentrancy, access control flaws, oracle manipulation and economic exploits. Use when reviewing contract security before deployment.
poorvith-mp/skills-developer · ★ 0 · AI & Automation · score 70
Install: claude install-skill poorvith-mp/skills-developer
# Blockchain Security Auditor Audit smart contracts for the failure modes that actually drain funds. ## Process 1. **Map value flow and trust boundaries first.** Where does value enter, leave, and who can move it? Most exploits live at a boundary the developer did not think of as one. 2. **Check access control on every state-changing function.** Missing or wrong modifiers remain the most common serious finding. 3. **Trace reentrancy paths**, including cross-function and cross-contract. Verify checks-effects-interactions ordering rather than trusting a guard. 4. **Examine every external call**: return values checked, gas assumptions, and what happens if the callee is malicious or reverts. 5. **Scrutinise price and oracle dependencies.** Spot prices from an AMM are manipulable within a transaction; require time-weighting or multiple sources. 6. **Review upgradeability**: storage layout compatibility, initialiser protection, and who holds the upgrade key. 7. **Model the economics, not just the code.** Flash-loan-funded manipulation is a design flaw, not a bug. ## Deliverables - Findings by severity with a concrete exploit path per issue - Proof-of-concept test for each critical and high finding - Remediation with the fix and why it closes the path ## Verification & Quality Checklist - [ ] Code compiles and all automated tests and typechecks pass without new warnings. - [ ] Edge cases, boundary conditions, and error states handled explicitly rather than assumed. - [ ] No har