thirdweb
Warn
Audited by Snyk on Jun 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly exposes blockchain payment and transaction capabilities. It includes APIs and functions to create and manage wallets (inAppWallet, createWallet), prepare and send on-chain transactions (prepareContractCall, useSendTransaction/sendTx), deploy contracts that can mint or manage tokens (deployPublishedContract for ERC-20/ERC-721/Marketplace), and a backend Engine REST API that mints tokens using a backend wallet via an Authorization token and x-backend-wallet-address. It also documents fiat-to-crypto onramps. These are specific crypto/financial execution capabilities (wallets, signing/sending transactions, minting tokens, and onramp payments), so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata