Can this skill assist with gas optimization?

Yes, it includes best practices for packing storage variables into single slots, using calldata instead of memory for function arguments, and utilizing events for cheaper data storage.

How does this skill help prevent reentrancy attacks?

It provides guidance on implementing the Checks-Effects-Interactions pattern and demonstrates the proper usage of OpenZeppelin's ReentrancyGuard to prevent malicious recursive calls during external transfers.

Is it compatible with modern Solidity versions?

Absolutely. The skill covers specific security behaviors for Solidity 0.8+ (which includes built-in overflow checks) as well as legacy versions requiring SafeMath.

Does it provide security testing examples?

Yes, the skill includes boilerplate code for Hardhat and Chai testing to help developers verify security assertions, such as preventing unauthorized access and ensuring transactions revert under attack conditions.

Solidity Smart Contract Security

Name: Solidity Smart Contract Security
Author: HermeticOrmus

byHermeticOrmus

安全与测试

Secures Ethereum and EVM-compatible smart contracts by implementing industry-standard security patterns and vulnerability prevention techniques.

关于

This skill provides comprehensive guidance for developing secure Solidity smart contracts on the blockchain. It equips Claude with the expertise to identify and fix critical vulnerabilities such as reentrancy, integer overflows, and unauthorized access. By applying battle-tested patterns like Checks-Effects-Interactions and Pull-over-Push, developers can build robust DeFi protocols and NFT contracts that are resistant to common attack vectors and optimized for gas efficiency. It also includes practical testing strategies using Hardhat and checklists for professional audit preparation.

主要功能

Advanced access control and role-based permission systems
Implementation of Checks-Effects-Interactions and Pull-over-Push patterns
0 GitHub stars
Hardhat-based security testing and audit preparation checklists
Gas optimization through storage packing and calldata usage
Reentrancy protection and integer overflow/underflow prevention

使用场景

Optimizing contract gas costs while maintaining strict security standards
Building secure DeFi protocols with emergency circuit breakers and pausable logic
Auditing existing Solidity contracts for known vulnerabilities and logic flaws

关于

主要功能

Advanced access control and role-based permission systems
Implementation of Checks-Effects-Interactions and Pull-over-Push patterns
0 GitHub stars
Hardhat-based security testing and audit preparation checklists
Gas optimization through storage packing and calldata usage
Reentrancy protection and integer overflow/underflow prevention

使用场景

Optimizing contract gas costs while maintaining strict security standards
Building secure DeFi protocols with emergency circuit breakers and pausable logic
Auditing existing Solidity contracts for known vulnerabilities and logic flaws