Critical
2
Detector Intelligence
These detectors are derived from the current Vyper Guard references and map directly to security, logic, and best-practice checks used in static analysis.
Critical
2
High
7
Medium
1
Low
2
External value transfer paths missing @nonreentrant protection.
Security
selfdestruct() without explicit authorization checks.
Security
External call occurs before internal state update.
Logic
raw_call() return value or behavior is not validated.
Security
Delegate call is used with untrusted target/data.
Security
Sensitive state writes lack robust sender authorization.
Security
Unsafe arithmetic primitives can overflow or underflow.
Logic
Value transfer inside loops can trigger DoS-like behavior.
Security
Subtraction path lacks defensive bound checks.
Logic
Compiler version intersects with known vulnerability advisories.
Best Practice
State-changing functions do not emit observable events.
Best Practice
Business logic relies on block.timestamp for critical decisions.
Best Practice