bithumb-deposit

Warn

Audited by Snyk on Jun 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). This skill is specifically designed to interact with the Bithumb cryptocurrency exchange and includes explicit write operations that move or enable movement of real funds. It requires API credentials and exposes commands to:
  • Generate deposit addresses for specific currencies/networks (bithumb deposit generate-address) — a wallet/address management operation tied to moving crypto funds.
  • Request KRW fiat deposits (bithumb deposit krw) — an explicit fiat deposit request that triggers real-money movement and requires Kakao 2FA.
  • It also documents safety gates and verification steps for writes and states that there is no demo mode — all deposit operations are real.

These are not generic utilities (e.g., general HTTP or browser automation); they are direct financial operations specific to a payment/crypto exchange API. Therefore it grants Direct Financial Execution Authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 13, 2026, 02:12 PM
Issues
1
Security Audit — snyk — bithumb-deposit