solidity-security

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about smart contracts that accept, move, and disburse funds on-chain. It contains concrete code and APIs that perform transfers (deposit(), withdraw(), payable(...).transfer, msg.sender.call{value: ...}), a DEX swap example, and DeFi patterns (commit/reveal, pendingWithdrawals). These are specific blockchain financial execution operations (sending/receiving ETH, swaps), not generic tooling, so it grants direct financial execution capability.