solidity-security-best-practices

When reviewing or writing Solidity code, apply these foundational principles as a mental checklist. Each principle addresses a category of vulnerability and guides your reasoning.

| Principle | What It Means | What to Verify |

| Checks-Effects-Interactions (CEI) | Validate inputs, update state, then interact externally | State changes complete before any external call | | Least Privilege | Every function and role has the minimum access required | Sensitive functions have appropriate access modifiers |

Solidity 开发的智能合约安全最佳实践。在编写、审查或审核 Solidity 代码时使用。涵盖重入预防、访问控制模式、安全外部调用、输入验证、升级安全和 OWASP 智能合约十大漏洞。触发涉及安全、漏洞检测、访问控制、CEI 模式、ReentrancyGuard、SafeERC20 或智能合约审核的任务。 来源：whackur/solidity-agent-toolkit。