- Reentrancy
- Code With No Effects
- Unencrypted Private Data On-Chain
- Integer Overflow and Underflow
- Floating Pragma
- Unchecked Call Return Value
- Unprotected SELFDESTRUCT Instruction
- State Variable Default Visibility
- Uninitialized Storage Pointer
- Use of Deprecated Solidity Functions
- DoS with Failed Call
- Authorization through tx.origin
- Signature Malleability
- Weak Sources of Randomness from Chain Attributes
- Lack of Proper Signature Verification
- Missing Protection against Signature Replay Attacks
- Insufficient Gas Griefing
- DoS With Block Gas Limit
- Hash Collisions With Multiple Variable Length Arguments
- Message call with hardcoded gas amount
- Price Oracle Manipulation
- Source: SWC Registry: Smart Contract Weakness Classification and Test Cases
- MindMap by Anugrah SR