DeFi Smart Contract Vulnerabilities Audit Guide

Here's a thinking process:

1. Analyze User Request:

   • Topic: DeFi smart contract vulnerabilities
   • Format: Audit report style
   • Quantity: 3 specific vulnerabilities
   • Goal: Describe them specifically for an audit report

2. Identify Key Requirements:

   • Must be DeFi-focused
   • Must be specific vulnerabilities (not generic "bugs")
   • Must be suitable for an audit report (formal, descriptive, technical but clear)
   • Exactly 3 items

3. Brainstorm DeFi Vulnerabilities:

   • Reentrancy (classic, but maybe too generic? I'll specify a DeFi context like flash loan attacks or pool exploits)
   • Integer overflow/underflow (less common now with Solidity ^0.8, but still relevant in older code or via library interactions)
   • Access control issues (owner key compromise, proxy admin take