web3-audit

Audit Solidity smart contracts for vulnerabilities using a 10-bug-class framework with grep patterns and Foundry PoC templates.

Updated Jun 5, 2026
One-click install
npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill web3-audit-sseshachala
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/sseshachala/Claude-BugHunter-archive/tree/main/skills/web3-audit
Command: npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill web3-audit-sseshachala

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Smart contract audits in Web3 are complex and error-prone; this skill provides a structured framework to detect 10 bug classes, reduce audit time, and improve remediation quality.

Core Features & Use Cases

  • 10 bug classes coverage with practical guidance and examples.
  • Pre-dive kill signals to triage engagements and prune risky targets.
  • Foundry PoC template for reproducible PoCs and testing.
  • Grep-pattern templates to locate class patterns across codebases.
  • Real Immunefi paid examples to calibrate impact and prioritization.

Quick Start

Run the Foundry PoC template against your Solidity project to surface the 10 bug classes and ready a PoC for disclosure.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit smart contracts for common Web3 security vulnerabilities?▼

To audit smart contracts for Web3 security vulnerabilities, apply a structured 10-bug-class framework to surface critical issues early in DeFi protocols, on-chain governance, and NFT marketplaces. This approach uses grep patterns to locate class patterns across codebases.

What is the best way to write a Foundry PoC for a Solidity smart contract exploit?▼

The best way to write a Foundry PoC for a Solidity exploit is to use a prebuilt Foundry PoC template that helps surface the 10 bug classes and readies a reproducible proof of concept for disclosure and remediation.

How do real Immunefi bug bounty examples calibrate smart contract vulnerability severity?▼

Real Immunefi bug bounty examples calibrate smart contract vulnerability severity by providing practical guidance that helps auditors prioritize discovery, gauge impact, and improve remediation quality across Web3 projects.

Can I use grep patterns to triage risky Solidity codebases before a full audit?▼

Yes, you can use grep-pattern templates to locate specific vulnerability class patterns across Solidity codebases, acting as pre-dive kill signals to effectively triage engagements and prune risky targets before committing to a full audit.

Does this security audit framework work for both DeFi protocols and NFT marketplaces?▼

Yes, this security audit framework applies directly to both DeFi protocols and on-chain governance systems, as well as NFT marketplaces, identifying common vulnerabilities using its structured 10-bug-class coverage.

Why should I use a structured bug class framework instead of ad-hoc smart contract security checks?▼

A structured bug class framework reduces smart contract audit time and improves remediation quality by preventing error-prone ad-hoc checks, ensuring consistent coverage of 10 critical vulnerability classes with practical examples.