domains / families / security / business-logic-vulnerabilities

business-logic-vulnerabilities

separate

Business logic vulnerability playbook. Use when reasoning about workflows, race conditions, price manipulation, coupon abuse, state machines, and multi-step authorization gaps.

When to use

• reasoning about workflows
• race conditions
• price manipulation
• coupon abuse
• state machines
• multi-step authorization gaps
• negative values
• workflow bypass

When not to use

• automation
• scanner-based detection

Skill page

Source