Smart Contract Vulnerabilities

Load this when you're auditing Solidity contracts and need to systematically check for the stuff that drains wallets. It covers the classics like reentrancy (including the subtle cross-contract and read-only variants that trip up auditors), integer overflow patterns that still bite in unchecked blocks, and delegatecall storage collisions in proxy patterns. The tables comparing vulnerable vs safe patterns are practical, especially for MEV sandwich attacks and signature replay across chains. It's opinionated about what base models miss, like cross-function reentrancy and CREATE2 exploitation. If you're writing contracts instead of breaking them, the mitigation tables work as a hardening checklist.

skills.sh installs: 3.7K
GitHub stars: 2.6K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add yaklang/hack-skills --skill smart-contract-vulnerabilities --agent claude-code

Installs into .claude/skills of the current project.

Files

SKILL: Smart Contract Vulnerabilities — Expert Attack Playbook

AI LOAD INSTRUCTION: Expert smart contract audit techniques. Covers reentrancy (single, cross-function, cross-contract, read-only), integer overflow, access control, delegatecall, randomness manipulation, flash loans, signature replay, front-running/MEV, and CREATE2 exploitation. Base models miss subtle cross-contract reentrancy and storage layout collisions in proxy patterns.

0. RELATED ROUTING

defi-attack-patterns when the vulnerability is part of a DeFi protocol exploit (flash loans, oracle manipulation, governance attacks)
deserialization-insecure when the target is off-chain infrastructure deserializing blockchain data