DeFi Smart Contract Vulnerabilities Audit Guide

Here's a thinking process:

1. Analyze User Request:

   • Topic: DeFi smart contract vulnerabilities
   • Format: 3 specific vulnerabilities for an audit report
   • Goal: Describe them specifically for an audit context

2. Identify Key Requirements:

   • Must be DeFi-focused
   • Must be smart contract vulnerabilities
   • Must be 3 distinct items
   • Must be specific (not generic "reentrancy")
   • Intended for an audit report

3. Brainstorm DeFi Vulnerabilities:

   • Reentrancy (classic, but maybe too generic? I can make it specific with patterns like "entered vs. exited" or "partial reentrancy")
   • Oracle manipulation/price feed attacks (e.g., Mango Markets, Cream Finance)
   • Flash loan attacks via improper state updates
   • Access control issues (owner key compromise,