🛡️ Pre-deploy security checklist

Vaults & share accounting (ERC-4626)

• First-depositor inflation — virtual shares/offset or a minimum initial deposit is in place.
• Rounding direction — deposit/mint & convertToShares round DOWN; previewMint/previewWithdraw round UP (in the vault's favor).
• totalAssets not manipulable — not derived from a spot balance an attacker can donate to.
• Fee accounting — lastTotalAssets updated on every op that touches fees.

Access control

• Every privileged function is gated — mint, pause, upgrade, setters behind a role/owner.
• Ownership is two-step — no lock-out from a typo'd transfer (Ownable2Step).
• initialize() protected — initializer modifier + deployed atomically (no front-run).
• Admin behind multisig/timelock — not a single hot EOA.

Oracles

• Staleness checked — updatedAt vs a max-age; revert on stale.
• Round validity — answeredInRound >= roundId, price > 0.
• Manipulation-resistant — TWAP/redundant sources, not raw spot.

Reentrancy & external calls

• Checks-Effects-Interactions — state updated before external calls.
• Reentrancy guards — on functions moving funds or calling out; read-only reentrancy considered.
• Hooks use call, not delegatecall — return values checked; extensions isolated.

Tokens & math

• Fee-on-transfer / rebasing — accounting uses balance-diff, not the input amount.
• Precision — multiply before divide; no silent truncation on core paths.
• SafeERC20 — for non-standard tokens (missing bool return, USDT-style).

Upgrades & testing

• Storage layout safe — no collisions across upgrades; gap variables if needed.
• Upgrade gated — behind governance/timelock; _authorizeUpgrade restricted.
• Invariant/fuzz tests — on the economic invariants (solvency, conservation of funds).
• Continuous review — re-audited on every change/deploy, not just once (your code keeps changing).