DeFi Smart Contract Vulnerabilities Audit Guide

Here's a thinking process:

1. Analyze User Request:

   • Topic: DeFi smart contract vulnerabilities
   • Format: 3 specific vulnerabilities for an audit report
   • Goal: Describe them specifically for an audit context

2. Identify Key Requirements:

   • Must be DeFi-specific (or heavily relevant to DeFi)
   • Must be 3 distinct vulnerabilities
   • Must be "specific" - not just generic "reentrancy", but detailed descriptions suitable for an audit report
   • Should likely include root cause, impact, detection methods, and mitigation (or at least clear description)

3. Brainstorm DeFi-Specific Vulnerabilities:

   • Reentrancy (classic, but maybe too generic? I can make it DeFi-specific like pool reentrancy or oracle-mediated reentrancy)
   • Price manipulation/oracle attacks (critical in DeFi)
   • Flash