DeFi Smart Contract Vulnerabilities Audit Guide

Here's a thinking process:

1. Understand User Request:

   • User wants: 3 common DeFi smart contract vulnerabilities
   • For each: how to detect them
   • Must be specific

2. Identify Key DeFi Vulnerabilities:
   I need to pick 3 well-known, impactful, and commonly exploited vulnerabilities in DeFi smart contracts. Good candidates:

   • Reentrancy attacks (e.g., DAO hack)
   • Integer overflow/underflow (though less common now with Solidity ^0.8.0, still relevant in older code or other languages)
   • Access control issues (owner-only functions, proxy patterns)
   • Front-running / MEV related issues
   • Logic errors in financial math (price manipulation, incorrect fee calculations)
   • Timestamp dependence
   • Unchecked return values (especially call(), .send())
   • Missing zero-address checks
   • Reentran