DeFi Protocol Security & Audit Analyzer
Audit DeFi protocols for vulnerabilities, economic attacks, and compliance risks
What You Can Do
You conduct comprehensive security audits of DeFi protocols by systematically identifying smart contract vulnerabilities, economic attack vectors, flash loan exploitation paths, MEV manipulation risks, oracle dependency failures, and governance exploits. This structured analysis helps you remediate critical flaws before mainnet launch, protecting user funds and protocol viability from costly post-deployment hacks and regulatory exposure.
Features
Identify reentrancy, overflow/underflow, access control, and logic flaws in DeFi code
Map flash loan exploits, liquidity pool manipulation, and token economic design weaknesses
Assess maximal extractable value vulnerabilities and oracle dependency attack surfaces
Identify governance token concentration risks, voting manipulation, and protocol parameter exploitation paths
Verify adherence to jurisdiction-specific requirements and institutional investor expectations
Evaluate third-party protocol dependencies and cross-protocol security implications
Generate prioritized action items with severity levels and remediation guidance
Example Output
Flash Loan Attack Vector Analysis:
- Identified unchecked price oracle dependency in liquidation mechanism
- Risk: Attacker uses flash loan to manipulate price feed, triggering false liquidations
- Severity: CRITICAL
- Remediation: Implement time-weighted average price (TWAP) oracle or Chainlink price feeds
MEV Vulnerability Report:
- Sandwich attack risk in swap execution with predictable slippage parameters
- Severity: HIGH
- Mitigation: Add commit-reveal pattern or MEV-resistant pricing mechanism
Governance Risk Assessment:
- 45% of governance tokens held by top 5 addresses
- Risk: Coordinated malicious proposal execution with minimal quorum requirement
- Recommendation: Implement timelock and increase voting threshold to 51%
What's Included
- SKILL.md instruction file with systematic audit framework:
- DeFi Protocol Security Checklist covering 40+ vulnerability categories:
- Flash Loan & MEV Attack Vector Template with exploitation scenarios:
- Oracle Dependency Risk Assessment Matrix:
- Governance Attack Surface Evaluation Worksheet:
- Economic Design Review Framework for token mechanics and incentive structures:
Who It's For
- DeFi Protocol Developers — Securing new DEX, lending, staking, and yield farming protocols before launch
- Smart Contract Auditors — Conducting systematic security reviews with comprehensive attack vector coverage
- DeFi Investors — Evaluating protocol security posture before institutional capital deployment
- Security Engineers — Assessing inherited or forked protocol codebases for risk mitigation
- Governance Specialists — Identifying governance token concentration and voting manipulation risks
Best For
- Pre-mainnet security audits for new DeFi protocols and DEXs
- Flash loan exploit and MEV vulnerability assessment
- Oracle dependency and price feed risk evaluation
- Governance token distribution and voting mechanism review
- Third-party protocol integration security assessment
- Post-incident remediation planning and security improvement roadmaps
You might also like
You can conduct comprehensive security assessments of smart contracts by feeding Claude modular contract code with explicit vulnerability analysis frameworks. Claude traces execution paths, identifies state management issues, evaluates cryptographic implementations, and spots economic model exploits. This structured approach catches interdependencies and subtle design flaws that surface-level reviews miss, making it ideal for pre-deployment audits and incident investigations.
by autoclaw-cc
You can conduct comprehensive security audits of DeFi protocols by analyzing smart contract code for technical vulnerabilities (reentrancy, integer overflow, authorization flaws), simulating economic attacks (flash loan exploits, sandwich attacks, liquidation cascades), and identifying second-order composability risks that could lead to protocol failure. Claude acts as your interactive analysis partner, pattern-matching known vulnerabilities and helping you model attack scenarios before external audits or mainnet deployment.
by autoclaw-cc
You can conduct comprehensive security audits of Solidity smart contracts by submitting code for systematic analysis across vulnerability categories, gas optimization, and best practice compliance. Claude identifies critical issues like reentrancy attacks, integer overflow/underflow, improper access controls, and unoptimized patterns—providing actionable findings with severity levels and remediation guidance. This skill works best as a pre-audit screening tool to catch issues before engaging professional auditors.
by autoclaw-cc
You can comprehensively analyze bridge architectures across multiple dimensions—from transfer models and custody mechanisms to validator infrastructure and liquidity strategies. This skill guides you through systematic security evaluation, protocol comparison, and vulnerability identification to design resilient cross-chain solutions aligned with your risk tolerance and technical constraints.
by autoclaw-cc
You can design novel consensus mechanisms or modify existing protocols (PoW variants, PoS schemes, hybrid models) while systematically evaluating their security, economic incentives, and attack resistance. The framework guides you through specification, formal verification, threat modeling, economic security simulation, and production-readiness assessment—identifying vulnerabilities in consensus logic, incentive structures, and Byzantine fault tolerance guarantees before mainnet launch.
by autoclaw-cc
You can conduct comprehensive security audits of Solidity smart contracts by providing your contract code and receiving structured analysis across multiple vulnerability categories. Claude identifies reentrancy risks, integer overflow/underflow issues, access control flaws, state management problems, gas inefficiencies, and best practice violations—catching subtle issues that automated analyzers miss. You'll receive detailed audit reports with severity ratings, specific remediation code, and business impact assessments to guide your fixes before mainnet deployment.
by autoclaw-cc
This skill runs rigorous financial analysis on your specific situation, calculating break-even points, NPV, IRR, and long-term wealth impact while factoring in behavioral and lifestyle considerations that pure math misses. You get a clear recommendation backed by numbers, scenario comparisons showing what happens if markets shift, and a detailed breakdown of when buying becomes better than renting.
by autoclaw-cc
You can design, validate, and document cross-chain protocols by evaluating bridge architectures (lock-and-mint, liquidity networks, light clients, relayers), modeling transaction flows with failure scenarios, identifying atomic swap vulnerabilities, and creating implementation roadmaps. This skill helps you make rigorous architectural decisions backed by security analysis and stakeholder alignment across your interoperability stack.
by autoclaw-cc