DeFi Smart Contract Vulnerabilities Audit Guide

Here's a thinking process:

1. Understand User Request:

   • User wants 3 DeFi smart contract vulnerabilities for an audit report
   • Must be specific
   • Format: Describe 3 vulnerabilities

2. Identify Key DeFi Smart Contract Vulnerabilities:
   I need to pick three well-known, impactful, and distinct vulnerabilities that are commonly found in DeFi audits. They should be described specifically (what it is, how it works, impact, examples if possible).

Potential candidates:

• Reentrancy attacks (classic, but maybe too generic? I can specify the variant or condition)
• Flash loan attacks via price manipulation/oracle issues
• Integer overflow/underflow (though less common now with Solidity 0.8+, still relevant in older code or via libraries)
• Access control issues (owner-only functions, proxy admin takeovers)
• Front-running/MEV exploitation