Here are three specific DeFi smart contract vulnerabilities suitable for inclusion in a professional audit report. Each entry includes the vulnerability type, a concrete technical scenario, potential impact, and recommended remediation.
1. Unchecked Return Value from transfer/send in Legacy Solidity (<0.5.0) with Non-Standard Tokens
Vulnerability Type: GAS-TOO-MUCH / UNHANDLED-RETURN
Severity: High
CWE: CWE-252 (Unchecked Return Value)
Description:
In Solidity versions prior to 0.5.0, the transfer and send functions forward 2300 gas to the recipient. If the recipient is a smart contract with a fallback/receive function that requires more than 2300 gas (e.g., to update internal state, emit events, or interact with another contract),
Top comments (0)