fhenix-confidential-erc20-callbacks

Warn

Audited by Snyk on Jun 22, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly about on-chain token transfer APIs and receiver callbacks: it defines confidentialTransferAndCall / confidentialTransferFromAndCall functions and an IERC7984Receiver.onConfidentialTransferReceived callback that can accept or reverse token transfers. The AI prompt asks for a staking-pool implementation that validates incoming token transfers, credits stakers, regrants ACLs, and decodes lock-duration data. These are specific crypto/blockchain financial operations (moving and handling ERC20-like tokens) rather than generic tooling, so it grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 22, 2026, 07:10 PM
Issues
1
Security Audit — snyk — fhenix-confidential-erc20-callbacks