DeFi Audit Workflow
A practical DeFi audit workflow for quickly reviewing Solidity/EVM protocols before a deeper manual audit or bug bounty sprint.
Use this when you need to map attack surface, prioritize high-risk contracts, and produce a first-pass DeFi security checklist without pretending the free skill is a guaranteed bug finder.
Search Keywords / Best Use Cases
- DeFi audit
- DeFi audit workflow
- DeFi audit checklist
- DeFi audit template
- DeFi audit report
- DeFi security audit
- DeFi security review
- DeFi protocol audit
- DeFi protocol security
- Solidity audit
- Solidity security audit
- smart contract audit
- smart contract audit workflow
- smart contract audit checklist
- smart contract audit template
- EVM audit checklist
- oracle manipulation review
- Chainlink oracle audit
- TWAP manipulation audit
- reentrancy checklist
- access control review
- accounting invariant review
- share price manipulation
- liquidation bug review
- Code4rena DeFi audit
- Sherlock DeFi audit
- HackenProof DeFi bounty
- bug bounty triage
- paid DeFi audit template
- Atlas $49 security skill pack
- Atlas $150 security skill pack
What This Free Skill Produces
- Protocol attack-surface map
- Contract-by-contract DeFi audit checklist
- Prioritized vulnerability classes by likelihood × impact
- First-pass notes for manual review or bounty triage
- Report skeleton for candidate findings
Workflow
1. Map Protocol Type
Classify the target: lending, AMM, vault, staking, bridge, oracle, derivatives, governance, account abstraction, or hybrid.
2. Prioritize Critical DeFi Failure Modes
Review in this order:
- Asset accounting and share/asset conversion
- Oracle freshness, decimals, fallback behavior, and TWAP manipulation
- Reentrancy and callback-enabled token paths
- Access control and emergency/admin powers
- Liquidation, solvency, and health-factor math
- Upgradeability, initialization, and storage layout
- Signature replay, permit/domain separator, and authorization boundaries
3. Produce a Review Plan
Return:
# DeFi Audit Plan
## Target
- Protocol type:
- Assets at risk:
- Core contracts:
## Highest-Risk Areas
1.
2.
3.
## Contract Checklist
- Contract:
- Risk class:
- Functions to inspect:
- Invariants to test:
## Candidate Findings
- Title:
- Impact:
- PoC needed:
Upgrade: Atlas Paid ZIP Packs ($49 / $150)
This free ClawHub skill is the discovery layer. If you want the ready-to-run premium workflow:
- Starter — $49: prompt pack, DeFi audit checklist, finding report template, and setup guide.
- Pro — $150: advanced modules, risk scoring rubric, bounty-readiness checklist, and reusable audit workspace template.
Get the paid packs here: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=defi-audit-workflow
If this free skill helped, please star/comment on ClawHub so other auditors can find it.
Guardrails
- This is triage, not a guaranteed vulnerability finder.
- Verify all candidate findings with runnable PoCs before submission.
- Do not submit findings without responsible disclosure approval.