near-dapp

Warn

Audited by Snyk on Jul 23, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly exposes blockchain wallet and transaction APIs: the React hook returns callFunction (write to contracts) and the Key Patterns include callFunction({..., deposit}) and transfer({ receiverId, amount }). It also documents connector.wallet()/connect() and wallet sign-in events. Those are specific crypto/transaction primitives (signing and sending NEAR tokens), which constitute direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 23, 2026, 04:06 PM
Issues
1