venice-api-overview

Warn

Audited by Snyk on Apr 23, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly documents wallet and crypto payment endpoints and flows. It defines an x402 (SIWE) wallet authentication mode, references USDC-on-Base prepaid balances, and lists account/billing endpoints including GET /x402/balance/{wallet}, POST /x402/top-up, and GET /x402/transactions/{wallet}. It also exposes a crypto RPC proxy (POST /crypto/rpc/{network}). The presence of a POST /x402/top-up (a top-up/send-funds endpoint) and wallet/transaction APIs constitutes specific, non-generic financial execution functionality (crypto wallet/payment operations).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 23, 2026, 08:02 PM
Issues
1