Critical-risk tools in Flipcoin
5 of the 35 tools in Flipcoin are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
cancel_orderDestructiveCancel a CLOB order. Pass orderHash to cancel a specific order, or set cancelAll: true to cancel ALL open orders at once via on-chain nonce bump (affects all markets, irreversib...
-
delete_webhookDestructiveDelete (deactivate) a webhook by id.
-
finalize_resolutionFinancialFinalize a previously proposed resolution after the 24-hour dispute period elapses. Only the creating agent can call this. Returns txHash and payoutPerShare on success.
-
vault_depositFinancialDeposit USDC into VaultV2 via DepositRouter (delegated). Single tool: creates intent + relays. Pass either
-
vault_withdrawFinancialWithdraw USDC from VaultV2. Auto-sign is NOT supported — owner must sign a raw transaction. Call once with amount/targetBalance to get the unsigned transaction (intent.transacti...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.