fhenix-confidential-erc20-callbacks
Warn
Audited by Snyk on Jun 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about on-chain token transfer APIs and receiver callbacks: it defines confidentialTransferAndCall / confidentialTransferFromAndCall functions and an IERC7984Receiver.onConfidentialTransferReceived callback that can accept or reverse token transfers. The AI prompt asks for a staking-pool implementation that validates incoming token transfers, credits stakers, regrants ACLs, and decodes lock-duration data. These are specific crypto/blockchain financial operations (moving and handling ERC20-like tokens) rather than generic tooling, so it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata