ERC-4626 Vault Security Audit Checklist (2026)

A field-tested security checklist for auditing ERC-4626 tokenized vaults — distilled from real DeFi audits.

WHAT'S INSIDE

• 8 categories of vault-specific bug classes (inflation/donation attack, rounding extraction, oracle manipulation, fee accumulator logic, strategy loss socialization, access control, ERC-20 edge cases, cross-chain vaults)

• Copy-paste Foundry test harness (invariants + inflation-attack repro)

• Known-exploit reference map

WHO IT'S FOR

• Solidity auditors running a vault review

• Protocol engineers self-reviewing before an audit

• Security researchers hunting bounties on vault protocols

FORMAT: instant-download PDF. Pay in crypto. No fluff — every item is a real bug that has drained vaults in production.