📦
Audit History
lifi-stablecoin-swap - 2 audits
Version comparison
Capability and finding changes across audited versions, newest first.
Audit version 2 Latest
Jul 19, 2026, 10:53 AM
Most command, filesystem, and reconnaissance detections are false positives caused by Markdown and TypeScript syntax. The quickstart exposes an integrator credential and performs wallet writes without validating the connected chain. It also hides transaction costs and uses unpinned package installation commands.
2
Files scanned
526
Lines analyzed
16
Review items
0
False positives ignored
Confirmed security concerns (4)
High
Environment file access
const KEY = process.env.NEXT_PUBLIC_LIFI_INTEGRATOR_KEY!;
NEXT_PUBLIC_LIFI_INTEGRATOR_KEY is consumed by client-side code, making the integrator credential visible in the browser bundle. That exposure can enable unauthorized use of the integrator account.
High
Connected Chain Is Not Validated Before Wallet Writes
The Base allowance check is followed by wallet writes using wallet.chain without asserting Base. A different connected chain can target unintended same-address contracts.
The code fixes the read client and token constants to Base but passes the current wallet chain into both transaction writes. No chain assertion or switch appears before approval or order opening.
High
Financial Costs and Settlement Mechanics Are Hidden
The guidance says to keep gas, spreads, and solver mechanics off screen and show no fee field. The same flow requires approval and escrow transactions.
The concealment instruction is explicit, while the documented flow includes signed on-chain transactions that can incur source-chain gas and settlement risk.
Medium
Quickstart Installs Unpinned Packages
The quickstart runs create-next-app at the latest version and installs dependencies without exact versions. Future package changes can alter generated behavior or introduce supply-chain risk.
The commands explicitly use the latest scaffold and omit dependency versions. Reproducing the guide later can therefore resolve different code.
Capability review items (8)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Environment variable access (dot notation)
const KEY = process.env.NEXT_PUBLIC_LIFI_INTEGRATOR_KEY!;
The client quickstart reads NEXT_PUBLIC_LIFI_INTEGRATOR_KEY, which is embedded in the browser bundle. This exposes the integrator credential to every application user.
High
Environment variable object
const KEY = process.env.NEXT_PUBLIC_LIFI_INTEGRATOR_KEY!;
The client quickstart reads NEXT_PUBLIC_LIFI_INTEGRATOR_KEY, which is embedded in the browser bundle. This exposes the integrator credential to every application user.
Low
Fetch API call
const res = await fetch(
This code or instruction contacts the external order.li.fi status service with an order identifier. The request is expected functionality, but it is real network access.
Low
Hardcoded URL · 2 occurrences
`https://order.li.fi/orders/status?onChainOrderId=${orderId}`,
This code or instruction contacts the external order.li.fi status service with an order identifier. The request is expected functionality, but it is real network access.
Low
Fetch API call
const status = await fetch(
This code or instruction contacts the external order.li.fi status service with an order identifier. The request is expected functionality, but it is real network access.
Low
Hardcoded URL
Poll `GET https://order.li.fi/orders/status?onChainOrderId=<orderId>`:
This code or instruction contacts the external order.li.fi status service with an order identifier. The request is expected functionality, but it is real network access.
Low
Hardcoded URL
**Quote** — `POST https://order.li.fi/quote/request` (under your integrator key):
This instruction sends quote requests to the external order.li.fi service under an integrator identity. The request is expected functionality, but it is real network access.
Risk Factors
⚙️ External commands (50)
references/quickstart.md:125-133 references/quickstart.md:133-149 references/quickstart.md:149-170 references/quickstart.md:170 references/quickstart.md:185-189 SKILL.md:24 SKILL.md:46 SKILL.md:48-53 SKILL.md:53-55 SKILL.md:55-57 SKILL.md:57-63 SKILL.md:63-65 SKILL.md:65-67 SKILL.md:67 SKILL.md:70 SKILL.md:71 SKILL.md:77 SKILL.md:78 SKILL.md:81-98 SKILL.md:98-104 SKILL.md:104-105 SKILL.md:105-106 SKILL.md:106-108 SKILL.md:108-117 SKILL.md:117-126 SKILL.md:126-141 SKILL.md:141-142 SKILL.md:142 SKILL.md:147-153 SKILL.md:153-155 SKILL.md:155-157 SKILL.md:157-160 SKILL.md:160-164 SKILL.md:164-165 SKILL.md:165-166 SKILL.md:166-167 SKILL.md:167-179 SKILL.md:179-181 SKILL.md:181-183 SKILL.md:183-187 SKILL.md:187 SKILL.md:188-194 SKILL.md:194-195 SKILL.md:195 SKILL.md:196 SKILL.md:197-198 SKILL.md:198 SKILL.md:201-203 SKILL.md:203-214 SKILL.md:214-216
🌐 Network access (13)
📁 Filesystem access (3)
🔑 Env variables (4)
Audited by: codex
Jul 9, 2026, 11:46 PM
All 90 static findings are false positives caused by Markdown code spans, TypeScript template literal syntax, relative imports, expected LI.FI API URLs, and documented environment setup. The skill is integration documentation and does not include hidden code execution, secret collection, prompt injection, or exfiltration intent.
2
Files scanned
535
Lines analyzed
4
Review items
0
False positives ignored
Risk Factors
⚙️ External commands (50)
references/quickstart.md:125-133 references/quickstart.md:133-149 references/quickstart.md:149-170 references/quickstart.md:170 references/quickstart.md:185-189 SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:33 SKILL.md:55 SKILL.md:57-62 SKILL.md:62-64 SKILL.md:64-66 SKILL.md:66-72 SKILL.md:72-74 SKILL.md:74-76 SKILL.md:76 SKILL.md:79 SKILL.md:80 SKILL.md:86 SKILL.md:87 SKILL.md:90-107 SKILL.md:107-113 SKILL.md:113-114 SKILL.md:114-115 SKILL.md:115-117 SKILL.md:117-126 SKILL.md:126-135 SKILL.md:135-150 SKILL.md:150-151 SKILL.md:151 SKILL.md:156-162 SKILL.md:162-164 SKILL.md:164-166 SKILL.md:166-169 SKILL.md:169-173 SKILL.md:173-174 SKILL.md:174-175 SKILL.md:175-176 SKILL.md:176-188 SKILL.md:188-190 SKILL.md:190-192 SKILL.md:192-196 SKILL.md:196 SKILL.md:197-203 SKILL.md:203-204 SKILL.md:204 SKILL.md:205 SKILL.md:206-207 SKILL.md:207
🌐 Network access (13)
📁 Filesystem access (3)
🔑 Env variables (4)
Audited by: codex