solidity-adversarial-analysis

| 1. Identify Assets | Map valuable targets | What can be stolen, locked, or manipulated? | | 2. Enumerate Entry Points | List all external/public functions | Which functions change state or move value? | | 3. Model Adversary | Define attacker capabilities | What resources (flash loans, MEV, tokens) does the attacker have? |

| 4. Construct Sequences | Build multi-step attack paths | What sequence of calls achieves the attack goal? | | 5. Verify Invariants | Check contract assumptions | Which mathematical or state invariants can be violated? |

| Category | Severity | Key Indicators | Example Attack |

Solidity 智能合约的对抗场景分析和威胁建模。从攻击者的角度分析合同、识别多步骤攻击向量或执行威胁建模时使用。涵盖闪贷攻击、预言机操纵、MEV/抢先交易、治理漏洞、重入场景、访问控制绕过、经济逻辑漏洞和跨合约可组合性风险。触发涉及对抗性分析、威胁建模、攻击场景、攻击向量、漏洞分析或红队审查的任务。 来源：whackur/solidity-agent-toolkit。