Common Vulnerabilities in Smart Contracts

Price Oracle Manipulation

Message call with hardcoded gas amount

Hash Collisions with multiple variable length arguments

DoS with Block Gas List

Insufficient Gas Griefing

Missing protection against Signature Replay Attacks

Lack of Proper Signature verification

Weak Sources of Randomness from chain attributes

Signature Malleability

Authorization through tx.origin

Recentrancy

Code with no effects

Unencrypted Privated Data On-Chain

Integer Overflow and Underflow

Floating Pragma

Unchecked Call Return Value

Unprotected SELFDESTRUCT Instruction

State Variable Default Visibility

Unintialized Storage pointer

Use of Deprecated Solidity Functions

DoS with Failed Call