Vuln cards.

Trigger

Use when contracts combine inferred operational mode and manually forced override mode.

Detection

If both inferred and forced-mode paths exist, assert forced-mode check dominates all early returns.

Findings

Trigger

Use when helper functions issue syscall then fallback to alternate selector on error.

Detection

Flag selector-fallback blocks that retry alternate selector within same transaction path.

Findings

Trigger

Use when fees are accepted as constructor or config parameters.

Detection

Find external/configurable fee input and verify explicit bound assertions in the same call path.

Findings