drift-protocol

Warn

Audited by Snyk on Jun 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is an SDK for the Drift Protocol on Solana and explicitly exposes APIs to move funds and execute trades. The documentation contains concrete, finance-specific functions and examples such as driftClient.placePerpOrder / placeSpotOrder (market/limit/trigger orders), driftClient.deposit and driftClient.withdraw, transferDeposit and transferPerpPosition, driftClient.swap (Jupiter swaps), initializeUserAccountAndDepositCollateral, settlePNL, and signing/submitting off-chain orders to the Swift server. These are explicit market-order, deposit/withdrawal, transfer, swap and settlement operations on blockchain assets — i.e., direct financial execution capabilities.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 20, 2026, 03:15 AM
Issues
1
Security Audit — snyk — drift-protocol