evm-audit-dos

Name: Evm Audit Dos
Author: austintgriffith

// EVM smart contract audit checklist for denial-of-service and griefing attacks. Covers gas griefing, unbounded loops, returndata bombing, block stuffing, and DoS via revert. Use when auditing protocols with loops, external calls, or time-sensitive operations. Load references/checklist.md for the full checklist.

Ejecutar en Manus

$ git log --oneline --stat

stars:5

forks:2

updated:28 de febrero de 2026, 16:14

Explorador de archivos

2 archivos

SKILL.md

readonly

name	evm-audit-dos
description	EVM smart contract audit checklist for denial-of-service and griefing attacks. Covers gas griefing, unbounded loops, returndata bombing, block stuffing, and DoS via revert. Use when auditing protocols with loops, external calls, or time-sensitive operations. Load references/checklist.md for the full checklist.

DoS & Griefing Audit Skill

Overview

Denial-of-service and griefing attack patterns in smart contracts. Focuses on gas exhaustion, revert-based DoS, and economic griefing.

Reference Files

references/checklist.md — Full audit checklist, load this when auditing for DoS/griefing

related-skills.json

mismo repositorio

evm-audit-access-control.md

from "austintgriffith/evm-audit-skills"

EVM smart contract audit checklist for non-obvious access control issues. Covers centralization risks, privilege escalation, two-step ownership, role management, and admin rug vectors. Use when auditing protocols with privileged roles, admin functions, or governance. Load references/checklist.md for the full checklist.

2026-02-285

evm-audit-assembly.md

from "austintgriffith/evm-audit-skills"

Inline assembly, CREATE/CREATE2, EXTCODESIZE, and low-level opcode vulnerabilities. Covers metamorphic contracts, constructor-time code absence, assembly math overflow, and div-by-zero returning 0. Load when the contract uses inline assembly or CREATE2.

2026-02-285

evm-audit-bridges.md

from "austintgriffith/evm-audit-skills"

Cross-chain bridge vulnerabilities for LayerZero V2, Chainlink CCIP, Wormhole, Across, and general bridge security. Covers message ordering, fee handling, relayer trust, dust/normalization, and configuration pitfalls. Load when auditing any cross-chain protocol.

2026-02-285

evm-audit-chain-specific.md

from "austintgriffith/evm-audit-skills"

Chain-specific EVM quirks for Arbitrum, Optimism, Base, zkSync, Blast, BNB, Berachain and other L2s. Covers block.number behavior, sequencer downtime, address aliasing, retryable tickets, opcode differences, gas fee variations, and PUSH0 support. Load when deploying to any non-mainnet EVM chain.

2026-02-285

evm-audit-defi-amm.md

from "austintgriffith/evm-audit-skills"

AMM-specific vulnerabilities including Uniswap V3/V4 hooks, concentrated liquidity, swap routing, TWAMM, slippage, and DEX integration pitfalls. Load when auditing any AMM, DEX, swap router, or Uniswap V4 hook.

2026-02-285

evm-audit-defi-lending.md

from "austintgriffith/evm-audit-skills"

CDP, lending market, liquidation, and borrowing vulnerabilities. Covers collateral handling, health factors, auction liquidations, bad debt, interest accrual, and lending protocol integration (AAVE, Compound). Load when auditing any lending/borrowing protocol.

2026-02-285

package.json