solidity-security-best-practices

When reviewing or writing Solidity code, apply these foundational principles as a mental checklist. Each principle addresses a category of vulnerability and guides your reasoning.

| Principle | What It Means | What to Verify |

| Checks-Effects-Interactions (CEI) | Validate inputs, update state, then interact externally | State changes complete before any external call | | Least Privilege | Every function and role has the minimum access required | Sensitive functions have appropriate access modifiers |

Solidity 開發的智慧合約安全最佳實務。在編寫、審查或審核 Solidity 程式碼時使用。涵蓋重入預防、存取控制模式、安全外部呼叫、輸入驗證、升級安全性和 OWASP 智慧合約十大漏洞。觸發涉及安全性、漏洞偵測、存取控制、CEI 模式、ReentrancyGuard、SafeERC20 或智慧合約審核的任務。 來源：whackur/solidity-agent-toolkit。