Smart Contract Vulnerability Analyzer
Identify and classify smart contract security vulnerabilities with structured analysis
What You Can Do
You can conduct comprehensive security assessments of smart contracts by feeding Claude modular contract code with explicit vulnerability analysis frameworks. Claude traces execution paths, identifies state management issues, evaluates cryptographic implementations, and spots economic model exploits. This structured approach catches interdependencies and subtle design flaws that surface-level reviews miss, making it ideal for pre-deployment audits and incident investigations.
Features
guide Claude through contract logic, state management, and external calls using structured prompts
categorize vulnerabilities by severity (critical, high, medium, low) with exploit feasibility assessment
identify known patterns (reentrancy, overflow, access control bypass, economic exploits) against contract logic
reason about how contract functions interact and where state assumptions break down
evaluate signature schemes, randomness sources, and key management for weaknesses
spot incentive misalignments, flash loan vulnerabilities, and protocol-level design flaws
generate fixes with code examples and explain why each fix closes the vulnerability
validate implementations against best practices for the contract type (ERC-20, DEX, staking, etc.)
Example Output
Reentrancy Vulnerability Found:
- Location:
withdraw()function, line 47 - Severity: Critical
- Issue: Contract transfers funds before updating balance, allowing recursive calls
- Exploit: Attacker calls
withdraw(), receives ETH via fallback function, callswithdraw()again beforebalances[msg.sender]is zeroed - Fix: Update balance before transfer (CEI pattern) or add reentrancy guard
Access Control Gap:
- Location:
updateAdmin()function, line 82 - Severity: High
- Issue: Function lacks
onlyOwnermodifier, allows any address to change admin - Impact: Attacker gains protocol control
- Fix: Add
require(msg.sender == owner)check
Economic Model Risk:
- Location: Staking reward distribution
- Severity: Medium
- Issue: Rewards calculated without rounding protection; dust amounts accumulate and cause precision loss over time
What's Included
- SKILL.md: core instructions for structuring vulnerability analysis prompts
- Vulnerability Checklist: 40+ vulnerability types organized by category (reentrancy, access control, state management, cryptography, economics)
- Analysis Framework Template: step-by-step prompts for guiding Claude through contract code sections
- Risk Severity Matrix: criteria for classifying vulnerabilities by impact and likelihood
- Exploit Pattern Reference: known attack vectors with code examples and mitigation strategies
- Audit Report Template: markdown structure for documenting findings with remediation priorities
Who It's For
- Smart contract security auditors — conduct comprehensive pre-deployment security assessments
- DeFi protocol developers — review contracts before mainnet launch to identify design flaws
- Security researchers — investigate vulnerabilities in complex mechanisms (AMMs, staking, lending)
- Bug bounty hunters — systematically analyze contracts for exploitable flaws
- Blockchain engineers — validate third-party integrations and external contract interactions
Best For
- Pre-mainnet contract audits with modular code review
- Incident investigation and post-exploit root cause analysis
- Reviewing novel mechanisms and unfamiliar Solidity patterns
- Validating security fixes against previously identified vulnerabilities
- Economic model assessment in DeFi protocols
- Assessing cryptographic implementations and randomness sources
You might also like
You can conduct comprehensive security audits of Solidity smart contracts by identifying common vulnerabilities like reentrancy bugs, overflow/underflow issues, and access control gaps. The skill applies OWASP Smart Contract Top 10 patterns and ERC token standards compliance checks to catch critical flaws before deployment, helping you optimize gas usage and strengthen contract architecture.
by autoclaw-cc
You can conduct comprehensive security audits of Solidity smart contracts by submitting code for systematic analysis across vulnerability categories, gas optimization, and best practice compliance. Claude identifies critical issues like reentrancy attacks, integer overflow/underflow, improper access controls, and unoptimized patterns—providing actionable findings with severity levels and remediation guidance. This skill works best as a pre-audit screening tool to catch issues before engaging professional auditors.
by autoclaw-cc
You can comprehensively analyze bridge architectures across multiple dimensions—from transfer models and custody mechanisms to validator infrastructure and liquidity strategies. This skill guides you through systematic security evaluation, protocol comparison, and vulnerability identification to design resilient cross-chain solutions aligned with your risk tolerance and technical constraints.
by autoclaw-cc
You can conduct rigorous Layer 1 and Layer 2 architecture analysis by inputting your technical constraints, use-case requirements, and performance targets. Claude generates quantified trade-off matrices comparing consensus mechanisms, throughput vs. finality trade-offs, security implications, and implementation roadmaps—helping you validate design assumptions and identify architectural bottlenecks before deployment.
by autoclaw-cc
You can conduct comprehensive security audits of DeFi protocols by analyzing smart contract code for technical vulnerabilities (reentrancy, integer overflow, authorization flaws), simulating economic attacks (flash loan exploits, sandwich attacks, liquidation cascades), and identifying second-order composability risks that could lead to protocol failure. Claude acts as your interactive analysis partner, pattern-matching known vulnerabilities and helping you model attack scenarios before external audits or mainnet deployment.
by autoclaw-cc
This skill audits support interactions using customer support-specific evaluation frameworks that assess tone, empathy, technical accuracy, resolution quality, and compliance adherence. You receive detailed scoring against rubrics, identification of coaching opportunities with actionable feedback, compliance verification against regulatory requirements, and quality trend analysis to improve overall team performance.
by autoclaw-cc
You can design novel consensus mechanisms or modify existing protocols (PoW variants, PoS schemes, hybrid models) while systematically evaluating their security, economic incentives, and attack resistance. The framework guides you through specification, formal verification, threat modeling, economic security simulation, and production-readiness assessment—identifying vulnerabilities in consensus logic, incentive structures, and Byzantine fault tolerance guarantees before mainnet launch.
by autoclaw-cc
This skill runs rigorous financial analysis on your specific situation, calculating break-even points, NPV, IRR, and long-term wealth impact while factoring in behavioral and lifestyle considerations that pure math misses. You get a clear recommendation backed by numbers, scenario comparisons showing what happens if markets shift, and a detailed breakdown of when buying becomes better than renting.
by autoclaw-cc