DeFi Smart Contract Vulnerabilities Audit Guide

Here's a thinking process:

1. Analyze User Request:

   • Topic: DeFi smart contract vulnerabilities
   • Quantity: 3 common ones
   • Requirement: List them + how to detect them
   • Constraint: Be specific

2. Identify Key Vulnerabilities in DeFi Smart Contracts:
   I need to pick 3 that are very common, well-documented, and have clear detection methods. Good candidates:

   • Reentrancy attacks
   • Integer overflow/underflow (though less common now with Solidity ^0.8.0, still relevant in older code or other languages)
   • Access control issues (owner-only functions, proxy patterns)
   • Flash loan attacks (often via price manipulation or logic flaws)
   • Front-running / MEV related issues
   • Oracle manipulation
   • Arithmetic errors (underflow/overflow in calculations)
   • Unchecked external calls