Defi Amm Security
- 1.4k installs
- 238k repo stars
- Updated August 5, 2026
- affaan-m/ecc
This is a copy of defi-amm-security by affaan-m - installs and ranking accrue to the original listing.
defi-amm-security is a Claude Code skill that runs a structured security checklist when writing or auditing Solidity AMM, liquidity pool, or swap contracts for developers who need DeFi economic and exploit coverage befor
About
defi-amm-security is an ECC skill that codifies automated market maker smart-contract audit patterns for Uniswap-style, Curve-style, and Balancer-style protocols. It walks swap, mint, and burn logic through checks for flash-loan price manipulation, missing slippage guards, sandwich attacks, unsafe on-chain price oracles, reentrancy via checks-effects-interactions, and integer overflow handling. The embedded checklist verifies oracle-sourced pricing, flash-loan assumptions, slippage limits, reentrancy mutexes, and economic invariants across liquidity pools. Solidity developers reach for defi-amm-security when reviewing new AMM code, hardening swap functions, or testing protocol economics before mainnet deployment.
- Covers reentrancy, CEI ordering, donation/inflation attacks, oracle manipulation, slippage, admin controls, and integer
- Checklist-plus-pattern library with hardened implementations for every user entrypoint
- Specifically targets contracts using token.balanceOf(address(this)) in share or reserve math
- Includes swap, deposit, withdraw, mint, burn, fee setters, pausers, and oracle update flows
- Local audit examples with strict execution safety rules
Defi Amm Security by the numbers
- 1,367 all-time installs (skills.sh)
- +83 installs in the week ending Aug 5, 2026 (Skillselion tracking)
- Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/affaan-m/ecc --skill defi-amm-securityAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 1.4k |
|---|---|
| repo stars | ★ 238k |
| Last updated | August 5, 2026 |
| Repository | affaan-m/ecc ↗ |
How do you audit Solidity AMM contracts for DeFi exploits?
Run a structured security checklist when writing or auditing Solidity AMM, liquidity pool, or swap contracts.
Who is it for?
Solidity developers auditing or implementing AMM, liquidity pool, or swap contracts who need structured DeFi exploit coverage beyond generic linting.
Skip if: Teams building non-DeFi backends or centralized exchange APIs without on-chain AMM logic should skip defi-amm-security.
When should I use this skill?
Solidity AMM, pool, or swap code is written or modified and needs structured review for flash loans, slippage, reentrancy, or price oracle risks.
What you get
Completed AMM security checklist, documented vulnerability findings, and hardened swap or pool contract recommendations
- Security checklist results
- Vulnerability findings report
- Hardening recommendations
Files
DeFi AMM セキュリティ
自動マーケットメーカー（AMM）スマートコントラクトのセキュリティパターンと監査チェックリスト。
使用時期
- Uniswap、Curve、BalancerなどのようなAMMコントラクトをレビュー
- スワップ関数、ミント、バーンロジックでセキュリティの問題を検出
- フラッシュローン、価格操作脆弱性を特定
- DeFiプロトコルの経済セキュリティをテスト
一般的な脆弱性
1. フラッシュローン攻撃
ローンが同一ブロック内で返却されたと仮定するコントラクトを攻撃。
2. スリッページ不足
ユーザーが予期しない不利な価格変更を受ける。
3. 再入攻撃
外部呼び出し後の状態チェック。
4. 価格操作
オンチェーン価格参照の信頼不足。
セキュリティチェックリスト
- [ ] すべての価格参照はオラクルから取得
- [ ] フラッシュローンは考慮（価格を信頼しない）
- [ ] スリッページ保護が実装
- [ ] チェック・エフェクト・相互作用パターン使用
- [ ] 再入保護（ミューテックス/チェック付き）
- [ ] 整数オーバーフロー/アンダーフロー処理
- [ ] アクセス制御とロール分離
詳細については、ドキュメントを参照してください。
Related skills
Entra App RegistrationCorrectly register an application in Microsoft Entra ID, configure OAuth 2.0 flows, request the right API permissions, and generate working MSAL authentication snippets484k1.3kAzure ComplianceRun automated Azure compliance scans, security posture checks, and Key Vault expiration audits before deploying.484k1.3k
Openclaw Secure Linux CloudDeploy and harden an OpenClaw agent instance on a Linux cloud server following battle-tested security defaults.270k72
Better Auth Best PracticesCorrectly configure Better Auth for secure authentication with database adapters, sessions, OAuth, email/password, and plugins in TypeScript projects.80.9k206
Firebase Security Rules AuditorAutomatically audit Firebase Firestore security rules for bypass vulnerabilities and logic gaps before deploying.80.4k397
Audit WebsiteRun comprehensive audits that surface SEO, performance, security, technical, and content issues with LLM-optimized reports and health scores.65.6k85How it compares
Use defi-amm-security when you need AMM-specific economic exploit patterns rather than general Solidity style or syntax review alone.
FAQ
What vulnerabilities does defi-amm-security cover?
defi-amm-security covers flash-loan attacks, missing slippage protection, sandwiching, unsafe on-chain price references, reentrancy, and integer overflow or underflow in AMM swap, mint, and burn logic.
Which DeFi contract types does defi-amm-security audit?
defi-amm-security targets automated market maker contracts, liquidity pools, and swap functions similar to Uniswap, Curve, or Balancer-style protocols written in Solidity.
What checklist items does defi-amm-security enforce?
defi-amm-security enforces oracle-based pricing, flash-loan-safe assumptions, slippage limits, checks-effects-interactions ordering, reentrancy mutexes, and correct integer arithmetic handling.