fhevm-public-decryption

Warn

Audited by Snyk on Apr 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly about onchain flows that convert encrypted (confidential) balances into public assets and perform transfers. It defines concrete FHEVM/Crypto APIs and patterns—FHE.makePubliclyDecryptable, instance.publicDecrypt, FHE.checkSignatures—and shows an onchain finalizeUnwrap that calls publicToken.transfer to move tokens. The guidance focuses on unwraps, settlement, escrow release and other fund-moving operations, not a generic tool. This is a specific crypto/blockchain capability to execute financial actions.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 17, 2026, 03:34 PM
Issues
1