Detailed Instructions

Missing function modifiers are the most basic and dangerous oversight, leaving administrative or user-specific functions publicly callable. Systematically review all functions that change contract state, particularly those handling funds, ownership, or configuration.

• Sub-step 1: Catalog all public and external functions, excluding view/pure functions. Flag any that update balances, ownership, or critical parameters.
• Sub-step 2: Check for the presence of a modifier like onlyOwner or a custom role-checking modifier on these functions.
• Sub-step 3: Verify that the modifier's logic is correct (e.g., require(msg.sender == owner, "Not owner")) and that the owner variable is properly initialized in the constructor.

solidityCopy
// VULNERABLE: Missing modifier
function withdrawAll() public {
    payable(msg.sender).transfer(address(this).balance);
}

// SECURE: Protected with modifier
function withdrawAll() public onlyOwner {
    payable(owner).transfer(address(this).balance);
}

Tip: Use static analysis tools like Slither to automatically detect functions missing access controls. Manually verify findings, as tools may miss custom role logic.

Detailed Instructions

Inheritance issues arise when a child contract overrides a parent function but does not preserve its access control modifier, or when using upgradeable proxy patterns incorrectly. The vulnerability often lies in the mismatch between inherited and implemented logic.

• Sub-step 1: Map the contract's inheritance tree. Identify functions overridden from parent contracts (e.g., OpenZeppelin's ERC20, Ownable).
• Sub-step 2: For each overridden function, verify it retains the original access modifier (e.g., onlyOwner) or implements an equivalent check. A missing super._functionName() call can also bypass logic.
• Sub-step 3: In upgradeable contracts using UUPS or Transparent proxies, confirm that the initialize function has an initializer modifier and is called only once, and that _authorizeUpgrade is properly secured.

solidityCopy
// VULNERABLE: Override drops the onlyOwner modifier
contract Child is Ownable {
    function sensitiveFunction() public override {
        // Parent's onlyOwner modifier is not applied
        doSensitiveAction();
    }
}

Tip: When using OpenZeppelin Contracts, leverage their override keyword and consistently use super to invoke parent logic, ensuring modifiers are executed.

Detailed Instructions

Using tx.origin for authorization creates a phishing vulnerability. While msg.sender refers to the immediate caller, tx.origin refers to the original EOA that initiated the transaction chain. A malicious contract can trick a user into calling it, and that contract can then call the vulnerable function, passing the tx.origin check.

• Sub-step 1: Search the codebase for all instances of tx.origin.
• Sub-step 2: Evaluate each use case. If it is used in a equality check like require(tx.origin == owner), it is a critical flaw.
• Sub-step 3: Manually test the bypass by deploying a malicious contract that calls the vulnerable function and having an authorized EOA interact with the attacker contract.

solidityCopy
// VULNERABLE: Uses tx.origin for authorization
function withdraw() public {
    require(tx.origin == owner, "Not owner");
    payable(owner).transfer(address(this).balance);
}

// SECURE: Uses msg.sender for authorization
function withdraw() public onlyOwner {
    payable(msg.sender).transfer(address(this).balance);
}

Tip: The use of tx.origin should be strictly limited to very specific, non-authorization use cases, such as denying access to smart contract callers entirely. Prefer msg.sender or established role-based systems.

Detailed Instructions

Incorrect role management involves flaws in systems using role-based access control (RBAC), such as OpenZeppelin's AccessControl. Vulnerabilities include missing revocation, overly permissive role granting, or single-point-of-failure administrators.

• Sub-step 1: Identify all roles (e.g., DEFAULT_ADMIN_ROLE, MINTER_ROLE) and the functions that grant/revoke them (grantRole, revokeRole).
• Sub-step 2: Check if the DEFAULT_ADMIN_ROLE is assigned to a multi-sig or decentralized entity, not a single EOA. Verify that admin roles can be revoked.
• Sub-step 3: Test for missing renunciation. Can a malicious or compromised admin grant themselves a role permanently? Look for a renounceRole function for roles users should be able to exit.
• Sub-step 4: Verify that protected functions correctly use the onlyRole modifier with the right role hash.

solidityCopy
// RISK: Single admin address can be a central point of failure.
constructor() {
    _grantRole(DEFAULT_ADMIN_ROLE, msg.sender); // Single EOA admin
}
// VULNERABILITY: No function to revoke the admin's own role.

Tip: Implement a multi-sig wallet or a DAO as the default admin. Use OpenZeppelin's AccessControl with _setRoleAdmin to create hierarchical roles, limiting the power of any single key.

Detailed Instructions

Time-based vulnerabilities occur when access permissions depend on block timestamps (block.timestamp) or block numbers, which miners can influence within a small margin. Front-running is possible when a permission check and a state change are separate transactions.

• Sub-step 1: Search for conditional checks using block.timestamp (e.g., require(block.timestamp > unlockTime, "Locked")). Assess if a miner's ability to adjust time by ~15 seconds breaks the security assumption.
• Sub-step 2: Look for access control race conditions. For example, a two-step ownership transfer where transferOwnership and acceptOwnership are separate transactions. A malicious actor could front-run the acceptOwnership call.
• Sub-step 3: Simulate a front-running attack by analyzing the mempool for a pending permission-granting transaction and broadcasting a higher-gas transaction to claim the permission first.

solidityCopy
// VULNERABLE: Time-dependent admin access
function becomeAdmin() public {
    require(block.timestamp > appointmentTime, "Too early");
    admin = msg.sender; // Miner can influence timestamp
}

Tip: Avoid using block.timestamp for critical access windows. For sensitive operations like ownership transfer, use a single function with signed messages or a commit-reveal scheme to prevent front-running.

Detailed Instructions

Begin by mapping out the actor model for your system. Identify all entities that will interact with the contract and the specific functions they need to call. Common roles include DEFAULT_ADMIN_ROLE, MINTER_ROLE, PAUSER_ROLE, and UPGRADER_ROLE. Avoid overly granular roles that complicate management, but ensure separation of duties is enforced. For each role, document the exact contract functions it should be able to execute. This design phase is critical; a flawed role structure is a foundational vulnerability. Use a mapping or a dedicated access control library to encode these relationships.

• Sub-step 1: List all privileged functions (e.g., mint, pause, upgrade, setFee).
• Sub-step 2: Group functions into logical roles based on actor type (admin, operator, manager).
• Sub-step 3: Formalize the hierarchy, if any (e.g., an admin can grant minter roles).

Tip: Implement the principle of least privilege. A role should only have the minimum permissions necessary to perform its intended function.

Detailed Instructions

Leverage the OpenZeppelin AccessControl contract to avoid reinventing the wheel and introducing subtle bugs. Import and inherit from AccessControl or AccessControlEnumerable. In the constructor, initialize roles by setting up the role admin structure and granting the initial admin role to the deployer (msg.sender). Use the _setupRole function for initial setup. For all privileged functions, add the onlyRole modifier. The bytes32 role identifier is typically the keccak256 hash of the role name (e.g., keccak256("MINTER_ROLE")). This provides a standardized, audited, and gas-efficient method for permission checks.

• Sub-step 1: Install OpenZeppelin contracts: npm install @openzeppelin/contracts.
• Sub-step 2: Inherit from AccessControl in your contract: contract MyToken is ERC20, AccessControl.
• Sub-step 3: Define role constants: bytes32 public constant MINTER_ROLE = keccak256("MINTER_ROLE");.

solidityCopy
import "@openzeppelin/contracts/access/AccessControl.sol";

contract SecureContract is AccessControl {
    bytes32 public constant MINTER_ROLE = keccak256("MINTER_ROLE");
    
    constructor() {
        _grantRole(DEFAULT_ADMIN_ROLE, msg.sender);
    }
    
    function mint(address to, uint256 amount) public onlyRole(MINTER_ROLE) {
        _mint(to, amount);
    }
}

Tip: Use AccessControlEnumerable if you need to enumerate all holders of a particular role, but be aware of the increased gas costs.

Detailed Instructions

Administrative functions like grantRole and revokeRole are powerful and must be protected. The default AccessControl behavior allows a role admin to manage that role. Ensure the DEFAULT_ADMIN_ROLE is carefully controlled, often held by a multi-signature wallet or a governance contract in production. Consider implementing a timelock or a confirmation requirement for critical role changes. A common vulnerability is accidentally renouncing the admin role for all accounts, permanently locking the contract. Use the renounceRole function with extreme caution, typically only for user-owned roles, not administrative ones.

• Sub-step 1: Expose a secure grantMinterRole function that includes additional checks or emits a specific event for off-chain monitoring.
• Sub-step 2: Implement a two-step process for transferring the DEFAULT_ADMIN_ROLE, where a new admin must first accept the role.
• Sub-step 3: Add event logging for all role changes to create an immutable audit trail.

solidityCopy
event RoleChangeAlert(bytes32 indexed role, address indexed account, address indexed sender, string action);

function safeGrantRole(bytes32 role, address account) public onlyRole(getRoleAdmin(role)) {
    require(account != address(0), "AccessControl: zero address");
    grantRole(role, account);
    emit RoleChangeAlert(role, account, msg.sender, "GRANTED");
}

Tip: For ultimate security, plan to transfer the DEFAULT_ADMIN_ROLE to a decentralized autonomous organization (DAO) or a timelock contract after initial setup.

Detailed Instructions

Beyond the onlyRole modifier, implement additional function-level guards. Use custom modifiers to combine role checks with state conditions, such as whenNotPaused or onlyWhenOpen. Check for reentrancy in functions that perform external calls after access checks. For functions that should be callable by a role OR under specific conditions (e.g., a user accessing their own data), implement explicit require statements within the function logic. This layered approach, known as defense in depth, ensures a breach of one check does not compromise the entire function. Always verify the state variables that govern access are immutable or can only be changed by authorized roles.

• Sub-step 1: Create a composite modifier: modifier onlyMinterWhenActive() { require(isActive, "Paused"); _; }.
• Sub-step 2: In functions with complex logic, add explicit require(hasRole(ROLE, msg.sender) || condition, "Access denied");.
• Sub-step 3: For critical fund transfers, combine onlyRole(TREASURER_ROLE) with a non-reentrant modifier.

solidityCopy
modifier onlyAdminOrOwner(address target) {
    require(
        hasRole(DEFAULT_ADMIN_ROLE, msg.sender) || target == msg.sender,
        "AccessControl: caller is not admin or owner"
    );
    _;
}

function withdrawFunds(address payable to, uint amount) public onlyAdminOrOwner(to) nonReentrant {
    // ... withdrawal logic
}

Tip: Keep modifier logic simple. Complex conditions inside modifiers can make the code harder to audit and increase gas costs.

Detailed Instructions

Write unit and integration tests that cover every permissioned function. Use a testing framework like Hardhat or Foundry. Test for both authorized access (ensuring roles can call functions) and unauthorized access (ensuring other roles and external addresses cannot). Specifically test role escalation scenarios, where a user with one role might try to gain another. Test the renounceRole function to ensure it doesn't create a lockout. Use fuzzing (e.g., with Foundry's forge test --fuzz-runs) to generate random addresses and role assignments to uncover unexpected behavior. Simulate the transfer of the DEFAULT_ADMIN_ROLE to ensure the contract remains manageable.

• Sub-step 1: Set up test accounts representing each role (admin, minter, attacker, user).
• Sub-step 2: For each privileged function, write a test where an unauthorized account calls it and expects a revert.
• Sub-step 3: Test boundary conditions, like granting a role to the zero address or to the contract itself.

solidityCopy
// Foundry test example
function test_NonMinterCannotMint() public {
    address attacker = makeAddr("attacker");
    vm.prank(attacker);
    vm.expectRevert("AccessControl: account is missing role");
    myToken.mint(attacker, 100e18);
}

function test_AdminCanGrantAndRevokeMinter() public {
    address newMinter = makeAddr("newMinter");
    vm.prank(admin);
    myToken.grantRole(myToken.MINTER_ROLE(), newMinter);
    assertTrue(myToken.hasRole(myToken.MINTER_ROLE(), newMinter));
    
    vm.prank(admin);
    myToken.revokeRole(myToken.MINTER_ROLE(), newMinter);
    assertFalse(myToken.hasRole(myToken.MINTER_ROLE(), newMinter));
}

Tip: Include tests for event emissions on role changes to ensure your off-chain monitoring will work correctly.