defi-amm-security

The defi-amm-security skill provides a security-focused checklist and implementation reference for Solidity-based automated market maker (AMM) contracts, liquidity pools, LP vaults, and swap flows. It is designed to help developers and auditors identify common vulnerability patterns in DeFi protocols, including reentrancy, unsafe reserve accounting, oracle manipulation, slippage issues, and insecure administrative controls. The skill emphasizes hardened implementation patterns over custom or hand-rolled approaches, helping teams reduce the risk of exploitable smart contract behavior in systems that manage token balances and liquidity operations.

The skill includes practical examples of vulnerable and safer Solidity implementations for core DeFi operations such as deposits, withdrawals, swaps, and accounting logic. It highlights best practices such as checks-effects-interactions (CEI) ordering, use of established libraries like OpenZeppelin ReentrancyGuard and SafeERC20, internal asset accounting instead of direct balance-based calculations, and caller-provided slippage protection with deadlines. It also addresses flash-loan-resistant oracle design through TWAP-based pricing patterns and provides operational guidance for safely running local audit commands and fuzzing workflows.

This skill is intended for Solidity developers, smart contract auditors, protocol security reviewers, and DeFi engineering teams building or reviewing AMMs and liquidity systems. It is especially useful during contract development, code review, security hardening, and audit preparation phases. Teams implementing token swaps, vault shares, mint and burn mechanics, or privileged admin functions can use this skill as a structured security review framework before deployment.