// the find
juancito-dev/multichain-auditor
Observations and tips checklist for auditing protocols on multiple chains 🧐
A reference checklist for smart contract auditors reviewing protocols that deploy across multiple EVM chains. It catalogs the ways chains diverge from Ethereum — opcodes, block timing, token behavior, precompiles — with concrete examples and links to past contest findings. Aimed squarely at security researchers doing audit work, not protocol developers.
Each item ties the abstract risk to a real finding from Code4rena or Sherlock, so you can see the actual exploited pattern rather than just the theory. The ERC20 decimals and contract interface sections catch a genuinely underappreciated class of bugs — USDT behaving differently on BSC vs Ethereum has tripped up more than a few protocols. The L2 sequencer uptime section includes working mitigation code, not just a warning. The links to evmdiff.com and the chain-specific official diff docs make it a useful starting point rather than a closed list.
It's a README, not a tool — there's no way to generate a chain-specific checklist for a given deployment target, so auditors still have to read the whole thing every time. The `chains/` directory has only `ethereum.md`; the per-chain breakdown that the structure promises doesn't exist. Nothing covers newer chains like Scroll, Mantle, or Mode, and the zkSync section is shallow given how divergent that runtime actually is from EVM. Last updated February 2026, but there's no versioning or changelog, so it's unclear whether entries reflect the current state of each chain's hardfork history.