pump-fee-system

Warn

Audited by Snyk on Jul 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is specifically about on-chain fee handling and distribution on the Pump protocol (mentions lamports, PDAs, fee recipients and a transfer function). It names program vault PDAs for creators, describes fee recipients and how fees "flow" to them, and explicitly references a transfer routine ("transferCreatorFeesToPump") and using transaction simulation for distributable fee computation. These are concrete blockchain financial operations (moving lamports / transferring accumulated fees), not generic tooling — therefore it grants direct crypto/financial execution authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 9, 2026, 10:46 PM
Issues
1
Security Audit — snyk — pump-fee-system