multiversx-dapp-audit

SKILL.md

Audit the frontend components of MultiversX applications built with @multiversx/sdk-dapp. This skill focuses on client-side security, transaction construction, and wallet integration vulnerabilities.

The Threat Model The frontend constructs transaction payloads that users sign. Vulnerabilities here can trick users into signing malicious transactions.

| Receiver address validation | Funds sent to wrong address | Validate against known addresses | | Data payload construction | Malicious function calls | Whitelist allowed operations | | Amount validation | Incorrect value transfers | Confirm amounts with user | | Gas limit manipulation | Transaction failures | Use appropriate limits |

Audite los componentes frontend de la dApp para detectar vulnerabilidades de seguridad en la integración de billetera y el manejo de transacciones. Úselo al revisar dApps de React/TypeScript usando sdk-dapp o al evaluar la seguridad del lado del cliente. Fuente: multiversx/mx-ai-skills.

Ver original