Pre-Audit Security Checklist

Use this comprehensive checklist to ensure your smart contracts are ready for audit. Critical items are marked with a red indicator.

Your Progress

0 of 45 items completed

Overall Progress0%

Critical Items0/29

Access Control

0/5 completed

All admin functions have proper access modifiersCriticalonlyOwner functions are reviewed for centralization risksCriticalRole-based access control is implemented where neededTwo-step ownership transfer is used (if applicable)Initializers can only be called onceCritical

Reentrancy Protection

0/4 completed

All external calls follow Checks-Effects-Interactions patternCriticalReentrancyGuard is used on sensitive functionsCriticalCross-function reentrancy is consideredCriticalRead-only reentrancy vectors are evaluated

Input Validation

0/5 completed

All external inputs are validatedCriticalArray length limits are enforcedZero address checks are in placeCriticalNumeric bounds are validatedCriticalSignature replay protection is implementedCritical

External Interactions

0/5 completed

Return values from external calls are checkedCriticalLow-level calls have proper error handlingCriticalUntrusted external contracts are handled safelyCriticalOracle data has staleness checksCriticalTWAP or multiple oracle sources are used

Token Handling

0/5 completed

ERC20 transfer/approve return values are handledCriticalFee-on-transfer tokens are consideredRebasing tokens are handled correctlyERC777 callback reentrancy is preventedCriticalToken decimals are handled correctlyCritical

Arithmetic & Logic

0/5 completed

Division by zero is preventedCriticalRounding errors are minimized and documentedunchecked blocks are reviewed carefullyCriticalType casting is done safelyCriticalOrder of operations is correctCritical

Gas & DoS Prevention

0/5 completed

Loops have bounded iterationsCriticalExternal calls in loops are minimizedCriticalPull over push pattern is used for ETH transfersStorage operations are optimizedCallback gas limits are considered

Upgradability (if applicable)

0/5 completed

Storage layout is compatible between versionsCriticalImplementation contracts are initializedCriticalProxy admin is properly securedCriticalUUPS _authorizeUpgrade is protectedCriticalStorage gaps are reserved for future use

Testing & Documentation

0/6 completed

Unit tests cover all functionsCriticalIntegration tests are writtenCriticalFuzz tests are implementedNatSpec documentation is completeREADME includes deployment instructionsKnown limitations are documented

Export Checklist

Download this checklist as a markdown file to include in your project documentation.