solidity-web3

Paths below are relative to this skill's directory.

Scope

Defensive work on EVM contracts you own or are being paid to review: writing them, reviewing them for the failure classes that lose funds, upgrading them behind a proxy, and proving both with Foundry. Verified against Solidity 0.8.37, OpenZeppelin Contracts 5.7.0, Foundry 1.8.1 and Slither 0.11.6.

Contract-specific vulnerability classes — reentrancy in all four shapes, oracle manipulation, proxy storage collisions, precision and rounding, non-standard ERC-20 behaviour, gas griefing — and the Foundry and Slither toolchain that demonstrates them are this skill's job. General application security-audit methodology — threat modelling, coverage ledgers, severity derivation, false-positive governance, report structure — is the security-review skill's; bring a finding's severity and the report shape from there and the contract reasoning from here.