solidity-adversarial-analysis

| 1. Identify Assets | Map valuable targets | What can be stolen, locked, or manipulated? | | 2. Enumerate Entry Points | List all external/public functions | Which functions change state or move value? | | 3. Model Adversary | Define attacker capabilities | What resources (flash loans, MEV, tokens) does the attacker have? |

| 4. Construct Sequences | Build multi-step attack paths | What sequence of calls achieves the attack goal? | | 5. Verify Invariants | Check contract assumptions | Which mathematical or state invariants can be violated? |

| Category | Severity | Key Indicators | Example Attack |

Solidity 智能合約的對抗場景分析和威脅建模。從攻擊者的角度分析合約、識別多步驟攻擊向量或執行威脅建模時使用。涵蓋閃貸攻擊、預言機操縱、MEV/搶先交易、治理漏洞、重入場景、存取控制繞過、經濟邏輯漏洞和跨合約可組合性風險。觸發涉及對抗性分析、威脅建模、攻擊場景、攻擊向量、漏洞分析或紅隊審查的任務。 來源：whackur/solidity-agent-toolkit。