What problem does it solve? Auditors need a systematic way to answer the attacker's first question about any protocol: where is the money, how does it move, and where can it leak. This Skill provides a structured framework for tracing funds through smart contracts so no deposit, withdrawal, or privileged path is overlooked. ## Core Features & Use Cases - Asset Storage Identification: Catalogs ETH balances, ERC20 holdings, share/LP tokens, and internal accounting variables across vaults, AMMs, lending, staking, and bridge protocols. - Flow Path Mapping: Documents deposit inflows, withdrawal outflows, internal transfers, and privileged admin paths like emergencyWithdraw, skim, sweep, and rescue. - Leakage Detection Patterns: Flags unvalidated withdrawals, precision-loss calculation errors, reentrancy via callbacks, and oracle price manipulation, with ready-to-use grep queries and an output report template. - Use Case: During a vault audit, use this framework to map totalAssets and totalSupply, trace deposit and withdraw flows, and identify a first-depositor inflation attack path before writing the finding. ## Quick Start Analyze this Solidity protocol and produce an asset flow report covering storage locations, deposit and withdrawal paths, and potential leakage points.
