List of Security Vulnerabilities

Introduction

This page contains a comprehensive list of common smart contract security vulnerabilities, compiled from various sources. We use it as our reference list for security audits.

The list

1. Re-Entrancy

2. Arithmetic Over/Under Flows

3. Unexpected Ether

4. Delegatecall

5. Default Visibilities

6. Entropy Illusion

7. External Contract Referencing

8. Short Address/Parameter Attack

9. Unchecked CALL Return Values

10. Race Conditions / Front Running

11. Denial Of Service (DOS)

12. Block Timestamp Manipulation

13. Constructors with Care

14. Unintialised Storage Pointers

15. Floating Points and Numerical Precision

16. tx.origin Authentication

17. Constantinople gas issue