DeFi Accounting
Share price, oracle freshness, liquidation edges, fee indexes, and solvency drift.
Free audit workflow tool
Smart Contract Audit Checklist
Guided audit
DeFi Accounting
Work through one section at a time.
Step 1 of 15
0 of 5 complete
DeFi protocol audit checklist
Smart contract audit checklist coverage
This checklist covers scope, architecture, access control, reentrancy, oracle manipulation, governance, signatures, denial of service, cross-chain assumptions, and report quality.
Checklist sections
Server-readable audit coverage without the clutter.
The interactive tool stays focused above. This summary makes the audit surfaces clear for readers, crawlers, and AI search systems.
Integrations
External assumptions, upgradeable dependencies, approvals, decimals, and paused integrations.
Multi-Chain & Cross-Chain
Replay protection, finality, rate limits, token mapping, and emergency isolation.
Token Behavior
Non-standard tokens, balance deltas, mint authority, allowance races, and receiver hooks.
Attacker Mindset
Unexpected call order, single-block manipulation, actor overlap, dust, and griefing cost.
Basics
Scope, input validation, state machines, events, and executable invariants.
Centralization Risk
Role blast radius, escalation paths, emergency powers, admin loss, and delay controls.
External Calls
State-before-call ordering, callbacks, return values, gas assumptions, and untrusted targets.
Hash & Merkle Proofs
Domain binding, encoding collisions, unique leaves, proof consumption, and root rotation.
Heuristics
Unbounded state, edge values, order dependence, accounting drift, and fail-closed behavior.
Low-Level Behavior
Storage layout, delegatecall, assembly, deterministic deployment, and Cairo serialization.
Signatures
Domain separation, malleability, nonce scope, permit safety, and contract wallets.
Timelock & Governance
Proposal lifecycle, snapshots, timelock bypasses, batches, and emergency cancellation.
Version & Build Issues
Compiler settings, known bugs, dependency drift, chain differences, and deployment scripts.
Report Quality
Impact proof, reproduction steps, affected code, specific remediation, and regression tests.
Go deeper
Turn checklist gaps into audit skill.
FAQ
Smart contract audit checklist questions
What is a smart contract audit checklist?
A smart contract audit checklist is a structured review workflow for finding issues in access control, accounting, external calls, signatures, cross-chain logic, upgrade paths, and report quality before or during a security review.
How should I use this checklist during an audit?
Pick the protocol type, use Guided audit mode to work through one section at a time, mark completed checks, then export the selected checks and report outline.
Does this checklist work for DeFi, tokens, bridges, governance, and Cairo?
Yes. The tool includes protocol filters for DeFi, token and NFT systems, governance, cross-chain systems, Cairo, and broader multi-contract systems.
Does this replace a professional smart contract audit?
No. This checklist helps structure review work, triage common risk areas, and prepare report notes, but it does not replace expert manual review, testing, and threat modeling.
Can I export the checklist results?
Yes. You can email yourself the selected checks, remediation prompts, and report sections from the export panel.