defi-attack-patterns

1# SKILL: DeFi Attack Patterns — Expert Attack Playbook
2 
3> **AI LOAD INSTRUCTION**: Expert DeFi exploitation techniques. Covers flash loan mechanics, oracle manipulation (spot vs TWAP), MEV extraction (sandwich, JIT, liquidation), precision loss attacks, governance exploits, bridge vulnerabilities, and token standard pitfalls. Base models often miss the single-transaction atomicity constraint of flash loans and the distinction between spot price and TWAP manipulation.
4 
5## 0. RELATED ROUTING
6 
7- [smart-contract-vulnerabilities](../smart-contract-vulnerabilities/SKILL.md) for underlying Solidity vulnerability patterns (reentrancy, integer overflow, delegatecall)
8- [deserialization-insecure](../deserialization-insecure/SKILL.md) when targeting off-chain bridge relayer or indexer infrastructure
9 
10---
11 
12## 1. FLASH LOAN ATTACKS
13 
14### 1.1 Mechanism
15 
16Flash loans provide uncollateralized borrowing within a single transaction. The entire borrow → use → repay cycle must complete atomically; if repayment fails, the transaction reverts as if nothing happened.
17 
18| Provider | Max Amount | Fee |
19|---|---|---|
20| Aave V3 | Pool liquidity per asset | 0.05% (can be 0 for approved borrowers) |
21| dYdX | Pool liquidity | 0 (uses internal balance manipulation) |
22| Uniswap V3 | Pool liquidity per pair | 0.3% (swap fee tier) |
23| Balancer | Pool liquidity | Protocol-configurable |
24 
25### 1.2 Price Oracle Manipulation
26 
27```
281. Flash borrow 100,000 WETH
292. Swap 100,000 WETH → TOKEN on AMM_A
30…