Cyfrin/Solodit Findings Database Skill

Purpose

Query and leverage the Cyfrin/Solodit findings database — the largest aggregated repository of smart contract audit findings — for vulnerability research, pattern extraction, and audit enhancement. This skill provides structured access to historical audit data across the entire Web3 ecosystem.

Database Statistics

Severity Distribution (Approximate)

Based on the indexed findings:

Top Vulnerability Categories

Ranked by frequency across the entire database:

1. Access Control — Unprotected functions, missing role checks, privilege escalation
2. Input Validation — Unchecked parameters, missing bounds, zero-address checks
3. Reentrancy — Cross-function, cross-contract, read-only reentrancy
4. Oracle Manipulation — Price feed manipulation, stale prices, TWAP attacks
5. Rounding/Precision — Integer division truncation, share price inflation, dust amounts
6. Flash Loan Attacks — Governance manipulation, price oracle attacks, liquidity draining
7. Front-running/MEV — Sandwich attacks, transaction ordering dependence
8. Denial of Service — Gas griefing, unbounded loops, block stuffing
9. Logic Errors — Incorrect state transitions, wrong comparison operators, off-by-one
10. Token Integration — Fee-on-transfer, rebasing tokens, non-standard ERC20 behavior

Capabilities

Core Query Operations

• Search by vulnerability type: Query findings by category tag (e.g., reentrancy, oracle-manipulation, access-control)
• Search by protocol type: Filter by protocol category (e.g., lending, DEX, bridge, yield aggregator)
• Search by severity: Filter Critical/High/Medium/Low findings
• Search by chain: Target chain-specific vulnerabilities (Ethereum, Arbitrum, Optimism, etc.)
• Search by auditor: Filter by specific audit firm (Code4rena, Sherlock, Spearbit, etc.)
• Get specific finding: Retrieve full details of a finding by its unique ID

Research Operations

• Pattern extraction: Group findings by category to identify recurring vulnerability patterns
• Protocol benchmarking: Compare finding density across similar protocols
• Trend analysis: Track vulnerability type frequency over time
• Auditor comparison: Compare finding distributions across audit firms
• Historical research: Study how specific vulnerability classes have evolved

Audit Enhancement

• Pre-audit intelligence: Build targeted checklists from historical findings for the protocol type under review
• Live code review support: Query relevant past findings when encountering suspicious patterns during review
• Report enrichment: Reference similar historical findings to add credibility and context to audit reports
• Mitigation validation: Check whether proposed fixes align with successful remediations in past findings

API Reference

Endpoints

See API Reference for full parameter documentation and response schemas.

Workflows

Resources

Integration with Other Skills

This skill feeds data into multiple other skills in the system:

Quick Start Example

To research vulnerabilities for a lending protocol audit:

1. Query: GET /findings?category=lending&severity=critical&per_page=50
2. Extract top attack vectors from results (oracle manipulation, liquidation logic, interest rate calculation)
3. Cross-reference with patterns/oracle-patterns.md and patterns/lending-patterns.md
4. Build targeted checklist using checklists/ templates
5. During review, query specific patterns: GET /findings?category=reentrancy&protocol_type=lending
6. Reference relevant historical findings in audit report

Data Quality Notes

• Findings are sourced from public audit reports and contest results
• Severity levels are preserved as assigned by the original auditor/judge
• Some findings may be marked as invalid or duplicate in contest platforms — filter accordingly
• Protocol names are normalized but may have variations across different audit firms
• Not all findings include code snippets — some only have descriptions and recommendations