Find asymmetric logic in paired smart-contract operations that should mirror each other (deposit/withdraw, mint/burn, stake/unstake, add/remove, open/close, and single-vs-batch variants) where the mismatch breaks an invariant, omits a check present on only one side, or lets an attacker extract value by round-tripping. Use when reviewing contracts that expose paired or inverse state-changing entry points.
Review Vyper contracts for high-signal language-semantics and protocol-accounting bugs: raw_call/raw_return forwarding, factory and blueprint traps, nonreentrancy observation windows, module/interface drift, byte/convert edge cases, unsafe arithmetic, iterative invariant drift, dust/share bugs, zero-amount state mutation, and multicall sequencing. Use when reviewing Vyper source, Vyper interfaces, JSON ABIs imported into Vyper, or Vyper deployment/build artifacts.
Analyze EVM smart contracts for storage-safety vulnerabilities that can cause persistent state updates to be lost, overwritten, misdirected, or to collide across proxy or upgrade boundaries.