Vulnerability scanning is a security review step that uses a known list of typical security vulnerabilities to manually check the code.

Static Analysis can partially automate this step but some vulnerabilities are not automatically discoverable.

Lists of security vulnerabilities

These are some lists of vulnerabilities to look for:

• Smart Contract Security Verification Standard
• Solidity security attack vectors by Sigma Prime
• Rari capital solcurity guide
• Ethereum Smart Contract Security Best Practices by ConsenSys
• Smart Contract Weakness Classification
• Open Zeppelin Advisor Security Best Practices

‍