Secure Your Smart Contracts
with |

// Example finding: access control
modifier onlyOwner() {
  require(msg.sender == owner, "not owner");
  _;
}

function executeProposal(bytes calldata data) external {
  // validate target + payload
  // ...
}

// Example: reentrancy risk
mapping(address => uint256) public balance;

function withdraw() external {
  uint256 amount = balance[msg.sender];
  require(amount > 0, "no funds");
  // ❌ external call before state update
  (bool ok,) = msg.sender.call{value: amount}("");
  require(ok, "send failed");
  balance[msg.sender] = 0;
}

// Example: missing event emission
function setOwner(address n) external onlyOwner {
  owner = n;
}

// Example: unchecked return values / input validation
function sweep(address token, address to, uint256 amt) external onlyOwner {
  // token.transfer(to, amt); // check return
}