All categories
Blockchain & Web3
Crypto, wallets, smart contracts, Web3, DeFi, NFTs, and decentralized apps
- 1,483
- 62
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse blockchain & web3 skills
Showing 1,201–1,224 of 1,483 skills
- Fork Choice AuditL1 trigger - audits fork-choice rule implementation (LMD-GHOST, Tendermint locking, Nakamoto longest-chain) for equivocation handling, slot-vs-block reasoning, duplicate block handling, and chain reorg correctness.Votes: 0GitHub stars: 281
- Execution Client HardeningL1 trigger - audits execution engine (EVM interpreter, WASM, SVM) for memory corruption, gas mispricing (EXTCODESIZE class), opcode semantics, and VM invariant breaks.Votes: 0GitHub stars: 281
- Dependency Audit NodeclientL1 supplement - audits Go modules and Rust crates for known vulnerabilities, outdated versions, supply chain risks, and replace/patch directives.Votes: 0GitHub stars: 281
- Data Availability EnforcementL1 supplement - audits storage / data-availability chains (Arweave, Filecoin, Irys, Crust, Celestia, EigenDA) for unenforced data commitments: producer commits to data inclusion but the validator never verifies the data was actually published / gossiped / sampled.Votes: 0GitHub stars: 281
- Cross Environment Semantic DriftL1 trigger - audits L1/L2 boundary bugs, precompile context assumptions, integer width mismatches at environment boundaries, and EVM-on-non-EVM drift.Votes: 0GitHub stars: 281
- Consensus Tx Identity InvariantsL1 trigger - audits replay protection, transaction identity binding, and cross-layer uniqueness.Votes: 0GitHub stars: 281
- Consensus Safety InvariantsL1 trigger - detects non-determinism, state transition completeness violations, and safety/liveness invariant breaks in consensus code. Inject into depth-consensus-invariant or depth-state-trace.Votes: 0GitHub stars: 281
- Consensus Math CorrectnessL1 trigger - audits consensus arithmetic for truncation, unused bounds, EMA direction, and threshold edge errors.Votes: 0GitHub stars: 281
- Config CorrectnessL1 trigger - audits configuration constants, documented bounds, feature-gated values, and unused protocol limits for semantic drift.Votes: 0GitHub stars: 281
- Bls Aggregation AuditL1 trigger - audits BLS signature aggregation: subgroup check, rogue-key attack defense, aggregation order, signing-domain separation.Votes: 0GitHub stars: 281
- Integration Hazard ResearchProtocol Type Trigger NAMED_EXTERNAL_PROTOCOL (detected when recon finds import/interface for an identifiable external protocol — not standard libraries). Researches known integration hazards of the target protocol.Votes: 0GitHub stars: 281
- Governance Attack VectorsProtocol Type Trigger governance (detected when Governor, Timelock, voting, proposal, quorum, delegate patterns found) - Inject Into Breadth agents, depth-external, depth-edge-caseVotes: 0GitHub stars: 281
- Dex Integration SecurityProtocol Type Trigger dex_integration (detected when recon finds swap|addLiquidity|removeLiquidity|IUniswapV2Router|ISwapRouter|amountOutMin|amountOutMinimum|slippage - AND the...Votes: 0GitHub stars: 281
- Account Abstraction SecurityProtocol Type Trigger account_abstraction (detected when ERC-4337 interfaces, EntryPoint, UserOperation, or Paymaster patterns found) - Inject Into Breadth agents, depth-externalVotes: 0GitHub stars: 281
- Staking Receipt TokensType Thought-template (instantiate before use) - Research basis Donation attacks via unsolicited token transfersVotes: 0GitHub stars: 281
- Event CorrectnessTrigger 15 events detected in recon event_definitions.md (optional skill) - Used By breadth agents (assigned to core state or dedicated agent)Votes: 0GitHub stars: 281
- Cross Chain Message IntegrityType Thought-template (instantiate before use) - Trigger Pattern CROSS_CHAIN_MSG flag detected (protocol RECEIVES cross-chain messages)Votes: 0GitHub stars: 281
- Zero State ReturnTrigger Pattern Vault/pool/first-depositor pattern detected - Inject Into Depth-edge-caseVotes: 0GitHub stars: 281
- Verification ProtocolHow to prove a hypothesis is TRUE or FALSE using Move unit tests.Votes: 0GitHub stars: 281
- Type SafetyTrigger Pattern Always (Aptos Move) - generic type exploitation - Inject Into Breadth agents, depth-state-traceVotes: 0GitHub stars: 281
- Token Flow TracingTrigger Pattern BALANCE_DEPENDENT flag (required) - Inject Into Depth-token-flow, breadth agentsVotes: 0GitHub stars: 281
- Temporal Parameter StalenessTrigger Pattern TEMPORAL flag (required) - Inject Into Breadth agents, depth-state-traceVotes: 0GitHub stars: 281
- Share Allocation FairnessTrigger SHARE_ALLOCATION flag detected in pattern scan - Used by Breadth agents, depth-edge-caseVotes: 0GitHub stars: 281
- Semi Trusted RolesTrigger Pattern SEMI_TRUSTED_ROLE flag (required) - Inject Into Breadth agents, depth-state-traceVotes: 0GitHub stars: 281