multiversx-payment-handling
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed for cryptocurrency payment handling in MultiversX smart contracts. It documents payable endpoints, payment types for EGLD/ESDT, validation of incoming payments, and explicit transfer APIs such as self.tx().to(...).payment(...).transfer() and self.tx().to(&caller).egld(&amount).transfer(). It also shows patterns for routing payments, depositing, swapping/liquidity, and making synchronous transactions (sync_call). These are direct crypto payment/transfer operations (sending and receiving value), so it grants direct financial execution capability.
Audit Metadata