semgrep-solidity
Semgrep rules for smart contract security — custom pattern matching, taint tracking, community rulesets, autofix rules, and CI/CD integration. Write targeted detection rules for Solidity vulnerabilities that static analyzers miss.
Semgrep rules for smart contract security — custom pattern matching, taint tracking, community rulesets, autofix rules, and CI/CD integration. Write targeted detection rules for Solidity vulnerabilities that static analyzers miss.
EigenLayer restaking protocol — stake ETH and LSTs to secure AVSs (Actively Validated Services), operator registration and delegation, reward claiming, and slashing conditions. Covers StrategyManager, DelegationManager, AVSDirectory, and the restaking lifecycle on Ethereum mainnet.
Wormhole cross-chain messaging and token transfers — NTT (Native Token Transfers) framework, VAA (Verified Action Approvals), guardian network, automatic and manual relayers, Wormhole Queries for cross-chain reads, and Standard Relayer integration. Covers Wormhole SDK, contract interfaces, and deployment across Ethereum, Solana, Arbitrum, Base, and Optimism.
Verified contract addresses for major EVM protocols across Ethereum, Arbitrum, Optimism, Base, and Polygon. Covers tokens, DEXes, lending, bridges, and infrastructure. Use as a reference when building integrations — every address is checksummed and should be verified onchain before use in production.
Tenderly blockchain DevOps platform — transaction simulation API, fork environments for testing, Alerts and Webhooks for monitoring, Web3 Actions (serverless functions), contract verification, Gas Profiler, and Transaction Debugger. Covers REST API integration and Tenderly SDK.
Compound V3 (Comet) lending protocol — supply, borrow, repay, withdraw, liquidation, governance proposals, and cross-chain Comet deployments. Covers Comet interface (single-asset borrowing), Configurator, Bulker for batched operations, and COMP governance across Ethereum, Arbitrum, Base, Optimism, and Polygon.
Complete guide for Squads Protocol - Solana's leading smart account and multisig infrastructure. Covers Squads V4 Multisig for team treasury management, Smart Account Program for account abstraction and programmable wallets, and Grid for stablecoin rails and fintech infrastructure.
Comprehensive Solidity security patterns, vulnerability prevention, and audit preparation. Covers reentrancy, access control, token decimals, oracle manipulation, vault inflation, proxy safety, EIP-712 signatures, MEV protection, and pre-deploy checklists. Every pattern includes wrong vs correct code.
Security audit of Solidity code while you develop. Trigger on "audit", "check this contract", "review for security". Modes - default (full repo), DEEP (+ adversarial reasoning), or a specific filename.
Test smart contracts comprehensively using Hardhat and Foundry with unit tests, integration tests, and mainnet forking. Use when testing Solidity contracts, setting up blockchain test suites, or va...
"Expert security auditor specializing in DevSecOps, comprehensive"
"Build production-ready Web3 applications, smart contracts, and"
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementin...
Ethereum development tutor and builder for Scaffold-ETH 2 projects. Triggers on "build", "create", "dApp", "smart contract", "Solidity", "DeFi", "Ethereum", "web3", or any blockchain development task. ALWAYS uses fork mode to test against real protocol state.
Ethereum development tutor and builder for Scaffold-ETH 2 projects. Triggers on "build", "create", "dApp", "smart contract", "Solidity", "DeFi", "Ethereum", "web3", or any blockchain development task. ALWAYS uses fork mode to test against real protocol state.
Verify that new blockchain addresses in the codebase are valid and match their expected type (contract, EOA, specific contract type like Folio, Governor, etc.). Use when reviewing PRs, commits, or uncommitted changes that add new addresses.
Help with the Sui Prover for formal verification of Move smart contracts. Use when the user wants to verify Move code, debug verification failures, write specifications, or understand prover options.