Vulnerability Explorer

External call before state update lets attacker re-enter and drain funds.

Attacker re-enters a different function that shares the same state.

Sensitive function has no ownership or role check, anyone can call it.

delegatecall runs external code in your contract's storage context.

Using on-chain spot prices lets attackers manipulate via flash loans.

Proxy and implementation share storage, wrong layout corrupts data.

Using tx.origin for auth lets phishing contracts impersonate users.

Arithmetic wraps around silently in Solidity < 0.8, causing wrong values.

Ignoring the return value of external calls can silently fail.

Loops over growing arrays can exceed the block gas limit.

MEV bots front-run and back-run your swap to extract value.

Uninitialized local storage variables point to slot 0, overwriting state.

Reusing a valid signature on another chain or contract to steal funds.

ecrecover returns address(0) for invalid signatures instead of reverting.

Solidity integer division truncates decimals, causing rounding errors.

A single reverting recipient can block the entire batch operation.

Changing an approval from N to M lets spender use N + M tokens.

Miners can slightly adjust block.timestamp, breaking time-based logic.