Audit Context Building

Rapidly build a comprehensive mental model of a MultiversX codebase before diving into vulnerability hunting. This skill ensures you understand the system holistically before searching for specific issues.

When to Use

• Starting a new security audit engagement
• Onboarding to an unfamiliar MultiversX project
• Mapping attack surface for penetration testing
• Preparing for code review sessions

1. Reconnaissance

Identify the Core

Locate where critical logic and value flows reside:

• Smart Contracts: Look for #[multiversx_sc::contract], #[payable("*")], and impl blocks
• Value Handlers: Functions that move EGLD/ESDT tokens
• Access Control: Owner-only functions, whitelists, role systems