audit-checklist

Executable checklist as Solidity test bases—import into Foundry, inherit the checks you need, run forge test. Patterns distilled from audits since 2019.

Install

forge install kcolbchain/audit-checklist

Minimal usage

import {ReentrancyCheck} from "audit-checklist/checks/ReentrancyCheck.sol";

contract MyVaultAudit is ReentrancyCheck {
    function setUp() public {
        targetContract = address(new MyVault());
    }
}

forge test

Checks

Module	Focus
`ReentrancyCheck`	CEI, cross-function reentrancy via callbacks
`AccessControlCheck`	Admin surfaces, initializers, roles
`OracleCheck`	Manipulable spot reads, TWAP gaps
`UpgradeCheck`	Proxy storage layout, uninitialized impl
`FlashLoanCheck`	Flash-loan-driven price / state attacks

Package layout

src/ChecklistBase.sol
src/checks/*.sol
src/examples/VulnerableVault.sol
test/Example.t.sol

MIT · New patterns welcome via issues/PRs · GitHub

GitHub

Source and examples

All projects

Back to docs home