DeFi Smart Contract Vulnerabilities Audit Guide

Here's a thinking process:

1. Analyze User Request:

   • Topic: DeFi smart contract vulnerabilities
   • Format: 3 specific vulnerabilities for an audit report
   • Goal: Describe them specifically for an audit context

2. Identify Key Requirements:

   • Must be DeFi-specific (or strongly relevant to DeFi)
   • Must be 3 distinct vulnerabilities
   • Must be specific (not generic "reentrancy", but specific patterns/contexts)
   • Tailored for an audit report format/language

3. Brainstorm DeFi-Specific Vulnerabilities:

   • Reentrancy (classic, but need to make it specific to DeFi, e.g., cross-function reentrancy, delegatecall issues)
   • Oracle manipulation/price feed attacks (critical for DeFi)
   • Flash loan attacks (via price manipulation, improper checks)
   • Access control issues in governance