SECURITY

Category: 06. Web3 / Blockchain
Section: Phase 3: Execution & Quality

11. SECURITY.md

Purpose: To secure smart contracts, wallets, and user data against common Web3 attacks.

Act as a smart contract security auditor.
Using the Smart Contract Specification and System Architecture below, create a Security document for a Web3 hackathon project.

SMART_CONTRACT_SPEC: [PASTE SMART_CONTRACT_SPEC]
ARCHITECTURE: [PASTE SYSTEM_ARCHITECTURE]

Provide:
1. Reentrancy protection (Checks-Effects-Interactions pattern)
2. Integer overflow/underflow protection (SafeMath, Solidity 0.8+)
3. Access control (Ownable, Roles, Modifiers)
4. Front-running protection (If applicable)
5. Oracle manipulation protection (If applicable)
6. Private key safety (Never commit private keys)
7. Environment variable protection (.env, .gitignore)
8. Wallet security best practices for users
9. Audit checklist before deployment
10. A pre-submission security checklist

Keep the security measures practical and easy to implement within a hackathon timeframe.
Explain each vulnerability and mitigation in beginner-friendly language.