Skill Claude CodeCodex
Analyze EVM smart contracts for storage-safety vulnerabilities that can cause persistent state updates to be lost, overwritten, misdirected, or to collide across proxy or upgrade boundaries.
Skill Claude CodeCodex
Find asymmetric logic in paired smart-contract operations that should mirror each other (deposit/withdraw, mint/burn, stake/unstake, add/remove, open/close, and single-vs-batch variants) where the mismatch breaks an invariant, omits a check present on only one side, or lets an attacker extract value by round-tripping.…
Skill Claude CodeCodex
Find production vulnerabilities by treating existing tests and missing test coverage as security intelligence when auditing a codebase with unit, integration, fuzz, or invariant suites.
Skill Claude CodeCodex
Review Uniswap v4 hooks and integrations for permission-bit, callback-authentication, pool-identity, custom-accounting, delta, settlement, dynamic-fee, JIT-liquidity, shared-custody, and liveness bugs. Use when a Solidity system implements IHooks or BaseHook, returns hook deltas, or relies on a v4 hook for pricing…
Skill Claude CodeCodex
Review Vyper contracts for high-signal language-semantics and protocol-accounting bugs: rawcall/rawreturn forwarding, factory and blueprint traps, nonreentrancy observation windows, module/interface drift, byte/convert edge cases, unsafe arithmetic, iterative invariant drift, dust/share bugs, zero-amount state…