multiversx-dapp-audit

SKILL.md

Audit the frontend components of MultiversX applications built with @multiversx/sdk-dapp. This skill focuses on client-side security, transaction construction, and wallet integration vulnerabilities.

The Threat Model The frontend constructs transaction payloads that users sign. Vulnerabilities here can trick users into signing malicious transactions.

| Receiver address validation | Funds sent to wrong address | Validate against known addresses | | Data payload construction | Malicious function calls | Whitelist allowed operations | | Amount validation | Incorrect value transfers | Confirm amounts with user | | Gas limit manipulation | Transaction failures | Use appropriate limits |

Auditez les composants dApp frontend pour détecter les vulnérabilités de sécurité dans l’intégration du portefeuille et la gestion des transactions. À utiliser lors de l'examen des dApps React/TypeScript à l'aide de sdk-dapp ou de l'évaluation de la sécurité côté client. Source : multiversx/mx-ai-skills.

Voir l'original