midnight-security

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). This skill is explicitly about building and operating blockchain smart contracts on the Midnight platform and includes concrete, domain-specific primitives for managing and moving value. It defines ledger fields for commitments, nullifiers, counters and includes example circuits that add tokens (addToken/commitments.insert), spend tokens (spend() — proving membership, checking/recording nullifiers), and a transfer example that updates balances. It also uses wallet-like secretKey()/publicKey() and commitment/nullifier primitives (persistentHash/persistentCommit) for signing/authorization and single-use anonymous token spends. These are specific crypto/blockchain financial operations (wallet/commitment/nullifier patterns and token spends), not generic tools, so the skill grants direct financial execution capability.