scaffold-eth-2
Warn
Audited by Snyk on Aug 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is a full Ethereum dApp framework (Scaffold-ETH 2) that explicitly exposes hooks and APIs to send on-chain transactions and move value: useScaffoldWriteContract (writeContractAsync), payable examples (BuyTokens with value/parseEther), batch writes (useScaffoldMultiWriteContract), low-level walletClient.sendTransaction via useTransactor, token transfer examples, and configuration that includes private keys (DEPLOYER_PRIVATE_KEY) and a burner wallet. These are specific, explicit financial execution capabilities for blockchain payments/transfers, not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata