drift-protocol
Warn
Audited by Snyk on Jun 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is an SDK for the Drift Protocol on Solana and explicitly exposes APIs to move funds and execute trades. The documentation contains concrete, finance-specific functions and examples such as driftClient.placePerpOrder / placeSpotOrder (market/limit/trigger orders), driftClient.deposit and driftClient.withdraw, transferDeposit and transferPerpPosition, driftClient.swap (Jupiter swaps), initializeUserAccountAndDepositCollateral, settlePNL, and signing/submitting off-chain orders to the Swift server. These are explicit market-order, deposit/withdrawal, transfer, swap and settlement operations on blockchain assets — i.e., direct financial execution capabilities.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata