Smart Contract Vulnerability Library
minia2a · August 2026 · What our AI audit detects, each with a worked case study
Our AI audit covers 9 vulnerability classes — from the classic to the subtle. Each links to a full case study showing how it's detected.
The 9 classes
CRITICALReentrancy — external call before state update (CEI violation).
Case study →
HIGHSignature Replay — signed message not bound to contract/chain.
Case study →
CRITICALStorage Collision — proxy implementation slot collision = takeover.
Case study →
CRITICALAccess Control — owner-change without permission, or uninitialized owner.
Case study →
CRITICALUnsafe Calls — approveAndCallcode, unvalidated low-level calls.
Case study →
HIGHtx.origin Authorization — the phishing flaw.
Case study →
MEDIUMInteger Overflow — unchecked arithmetic wraps balances.
Case study →
CRITICALdelegatecall Abuse — foreign code runs in your storage.
Case study →
Audit your contract against these classes.
•
Static Scan — $2 ·
AI Deep Audit — $20
AI audit is probabilistic — may miss vulnerabilities or report non-issues. Treat as guidance, not proof.