Worked examples of the vulnerability classes that show up most often in Solidity and Rust/Anchor code. Every code sample is taken from the fixture set Weakspot is tested against, not written for the article.
The checks-effects-interactions violation, walked through on a real vault contract — attack sequence included.
AccountInfo where Signer belonged — the Anchor equivalent of forgetting onlyOwner, and just as exploitable.
A one-line ordering mistake in a staking pool that pays every user exactly nothing. No revert, no error.
48 findings down to 7, of which 1 was real. What that number says about every AI auditor, including this one.