Here are three critical DeFi smart contract vulnerabilities commonly identified in professional audit reports, presented with specific technical context, root causes, and potential mitigations. These examples reflect real-world attack vectors observed in major protocols (e.g., Curve, Compound, Aave, Uniswap v2 forks).
1. Reentrancy via Callback Hooks (Non-Atomic State Updates)
Vulnerability Type: Reentrancy
Severity: Critical
Affected Component: Yield Farmers, Lending Protocols with External Calls
Description
Reoccurrence of reentrancy attacks due to state changes after external calls combined with lack of checks-effects-interactions (CEI) pattern or reentrancy guards. This is especially dangerous in protocols that use callback hooks (e.g., onTransfer, onSwap, onMint) triggered by external contracts.
Specific Scenario
A lending protocol allows users to deposit assets and
Top comments (0)