Аудит безопасности смарт-контрактов DeFi

★ 8.1 · blockchain

web3-audit is a Claude Code skill that performs smart contract security audits across 10 DeFi bug classes: accounting desync, access control, incomplete path, off-by-one, oracle, ERC4626, reentrancy, flash loan, signature replay, and proxy. Before diving into code, the skill evaluates pre-dive kill signals — such as TVL under $500K or two top-tier prior audits — and scores targets on a 10-point scale to decide whether a bounty is worth pursuing. Each bug class comes with grep patterns for scanning Solidity source and a Foundry PoC template for reproducing exploits. Real Immunefi paid examples ground the methodology: Wormhole ($10M), Parity ($150M frozen), Alchemix, and others. Designed for auditing Solidity or Rust contracts and for quickly deciding whether a DeFi target justifies the effort.