scaffold-eth-2

Warn

Audited by Snyk on Aug 4, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is a full Ethereum dApp framework (Scaffold-ETH 2) that explicitly exposes hooks and APIs to send on-chain transactions and move value: useScaffoldWriteContract (writeContractAsync), payable examples (BuyTokens with value/parseEther), batch writes (useScaffoldMultiWriteContract), low-level walletClient.sendTransaction via useTransactor, token transfer examples, and configuration that includes private keys (DEPLOYER_PRIVATE_KEY) and a burner wallet. These are specific, explicit financial execution capabilities for blockchain payments/transfers, not generic tooling.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 4, 2026, 12:32 AM
Issues
1
Security Audit — snyk — scaffold-eth-2