scry
Warn
Audited by Socket on Oct 6, 2026
1 alert found:
SecuritySecuritybin/topup-test-wallets.sh
MEDIUMSecurityMEDIUM
bin/topup-test-wallets.sh
The code appears intended to fund designated test wallets, not to steal data or establish persistence. However, it makes privileged ledger changes and contains a material SQL-injection risk because target values are inserted into SQL without validation. Restrict execution and environment control, and validate targets as bounded nonnegative integers or use parameterized SQL.
Confidence: 98%Severity: 78%
Audit Metadata