# AuditAI Benchmark Matrix

| Contract | Expected | HTTP | Findings | Severities | Top Findings |
|---|---|---:|---:|---|---|
| 01_reentrancy.sol | Reentrancy (High/Critical) | 200 | 1 | Critical | Reentrancy in withdraw allows repeated ETH withdrawals |
| 02_access_control.sol | Missing access control / auth flaw | 200 | 1 | Critical | Unrestricted sweep allows anyone to drain all ETH |
| 03_unchecked_call.sol | Unchecked low-level call | 200 | 1 | Medium | Unchecked low-level call causes silent payout failure and balance loss |
| 04_oracle_misuse.sol | Oracle misuse / stale price risk | 200 | 4 | Critical, High, Medium | Global collateral accounting allows any user to borrow against everyone else's deposits; Borrowed amount is not tracked or collateralized state updated, enabling repeated draining; Unsafe cast of signed oracle price to uint256 can turn negative price into huge value |
| 05_safe_vault.sol | No critical finding (ideally low/info only) | 200 | 0 | None | (no findings) |