YASIR

IQBAL

Conducted an in-depth security assessment of Solidity smart contracts using Foundry (Forge), simulating real-world exploits to harden contracts against attacks. Here’s a breakdown of the critical vulnerabilities I tested and why they matter: 1️⃣ Reentrancy: Exploited recursive callback attacks (The DAO hack) to drain funds. Mitigation: Checks-Effects-Interactions pattern. 2️⃣ Arithmetic Over/Underflows/Precision: Triggered integer exploits pre- and post-Solidity 0.8. Key fix: SafeMath or compiler checks. 3️⃣ Denial of Service (DoS): Locked contracts via gas exhaustion or malicious reverts (e.g., owner-controlled loops). 4️⃣ Mishandling ETH: Forced ETH losses via unhandled send()/transfer() failures or orphaned funds. 5️⃣ Weak Randomness: Manipulated block.timestamp/blockhash for pseudo-RNG exploits. 6️⃣ Missing Access Controls: Hijacked admin functions via unprotected onlyOwner gaps. 7️⃣ Centralization Risks: Owner can change Balances of other users. 8️⃣ Uninitialized Storage: Exploite