Web3 Security

Blockchain Smart Contract Vulnerability Taxonomy 2.0

HKISG Web3 Working Group · 2025

Abstract

An updated taxonomy of smart contract vulnerabilities cataloguing 156 distinct vulnerability classes across Solidity, Vyper and Rust-based contracts, with severity scoring and mitigation guidance.

Abstract

An updated taxonomy of smart contract vulnerabilities cataloguing 156 distinct vulnerability classes across Solidity, Vyper and Rust-based contracts, with severity scoring and mitigation guidance.

Introduction

This research paper was produced by the HKISG Research Committee. Full methodology, data analysis and findings are available to HKISG members.