hardhat
Warn
Audited by Snyk on Aug 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). This Hardhat skill is explicitly about interacting with blockchains: it shows configuring deployer private keys (accounts: [DEPLOYER_PRIVATE_KEY]), deploying contracts, running deploy commands on networks, and executing on-chain transactions (e.g., Token.deploy, token.transfer, contract transaction waits). It also documents JSON-RPC methods and helpers that change balances or impersonate signers (hardhat_setBalance, impersonateAccount, setBalance). These are concrete crypto/blockchain transaction and signing capabilities — i.e., direct financial execution (wallets/signing, transfers, deployments).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata