DeFi Smart Contract Vulnerabilities Audit Guide

Here's a thinking process:

1. Analyze User Request:

   • Topic: DeFi smart contract vulnerabilities
   • Format: 3 specific vulnerabilities for an audit report
   • Goal: Describe them specifically for an audit context

2. Identify Key Requirements:

   • Must be DeFi-specific (or heavily relevant to DeFi)
   • Must be 3 distinct vulnerabilities
   • Must be "specific" - not generic, but detailed enough for an audit report
   • Should be practical, actionable, and technically grounded

3. Brainstorm DeFi Vulnerabilities:

   • Reentrancy (classic, but still critical)
   • Integer overflow/underflow (less common now with Solidity ^0.8, but still relevant in older code or other languages)
   • Access control issues (owner key compromise, proxy patterns)
   • Oracle manipulation/price feed issues
   • Flash loan attacks