Find Vulnerabilities
Before Hackers Do.

1// SPDX-License-Identifier: MIT
2pragma solidity ^0.8.19;
3
4contract Vault {
5    mapping(address => uint256) public balances;
6
7    function deposit() external payable {
8        balances[msg.sender] += msg.value;
9    }
10
11    function withdraw() external {
12        uint256 balance = balances[msg.sender];
13        require(balance > 0, "No balance");
14
15        // CEI Violation: call before state update
16        (bool success, ) = msg.sender.call{value: balance}("");
17        require(success, "Transfer failed");
18
19        balances[msg.sender] = 0;  // Too late
20    }
21
22    receive() external payable {}
23}