> For the complete documentation index, see [llms.txt](https://red.infiltr8.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://red.infiltr8.io/smart-contracts-pentesting.md).

# Smart Contracts Pentesting

- [On-Chain Analysis](https://red.infiltr8.io/smart-contracts-pentesting/on-chain-analysis.md)
- [Solidity Events Analysis](https://red.infiltr8.io/smart-contracts-pentesting/on-chain-analysis/solidity-events-analysis.md): Leveraging Events for Blockchain Forensics and Investigation
- [Transactions Analysis](https://red.infiltr8.io/smart-contracts-pentesting/on-chain-analysis/transactions-analysis.md)
- [Smart Contract Vulnerabilities](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities.md)
- [EVM Attack Surfaces](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities/evm-attack-surfaces.md)
- [Sensitive Data Exposure](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities/evm-attack-surfaces/sensitive-data-exposure.md): SCWE-044: Insecure Use of Storage
- [Solidity Metadata Exposure](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities/evm-attack-surfaces/solidity-metadata-exposure.md)
- [Integer overflow/underflow](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities/evm-attack-surfaces/integer-overflow-underflow.md): SCWE-047: Integer Overflows and Underflows
- [Insecure DelegateCall](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities/evm-attack-surfaces/insecure-delegatecall.md): SCWE-035: Insecure Delegatecall Usage
- [Reentrancy](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities/evm-attack-surfaces/reentrancy.md): SCWE-046: Reentrancy Attacks
- [Dynamic Array Underflow](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities/evm-attack-surfaces/dynamic-array-underflow.md): SCWE-124: Write to Arbitrary Storage Location
- [Hash Collisions (abi.encodePacked)](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities/evm-attack-surfaces/hash-collisions-abi.encodepacked.md): SCWE-074: Hash Collisions with Multiple Variable Length Arguments
- [Contract Lifecycle & Upgradeability](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities/contract-lifecycle-and-upgradeability.md)
- [Incorrect Constructor Name](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities/contract-lifecycle-and-upgradeability/incorrect-constructor-name.md): SCWE-070: Incorrect Constructor Name
- [Protocol Layer Attack Surfaces](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities/protocol-layer-attack-surfaces.md)
- [AMMs (Automated Market Makers)](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities/protocol-layer-attack-surfaces/amms-automated-market-makers.md)
- [Oracles](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities/protocol-layer-attack-surfaces/oracles.md)
- [Lending Protocols](https://red.infiltr8.io/smart-contracts-pentesting/vulnerabilities/protocol-layer-attack-surfaces/lending-protocols.md)