Critical-risk tools in Agentek Eth
34 of the 165 tools in Agentek Eth are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
depositWETHFinancialWrap native ETH into WETH (Wrapped ETH) by depositing into the WETH contract. You receive an equal amount of WETH, an ERC20 token.
-
intentAaveDepositFinancialDeposits tokens into the Aave protocol to supply liquidity and earn interest.
-
intentAaveWithdrawFinancialWithdraws tokens from Aave, redeeming your supplied assets (aTokens).
-
intentApproveSlowTransferFinancialGuardian approves a transfer in SLOW contract
-
intentDepositAcrossFinancialBridge ERC20 tokens cross-chain via Across Protocol. Automatically handles token approval and fetches optimal relay fees. Does not support native ETH.
-
intentDepositToSlowFinancialDeposit tokens or ETH into SLOW contract with a timelock
-
intentReverseSlowTransferDestructiveReverse a pending transfer in SLOW contract
-
intentTransferFinancialTransfer ERC20 tokens or native ETH to an address or ENS name. Supports ENS resolution, automatic decimal handling, and auto-selects the cheapest chain if chainId is omitted.
-
intentTransferFromFinancialTransfer ERC20 tokens from another address using transferFrom. Requires prior ERC20 approval from the
-
intentTransferPositionFinancialTransfers ownership of a Uniswap V3 LP NFT to another address using safeTransferFrom.
-
intentWithdrawFromSlowFinancialWithdraw unlocked tokens from SLOW contract
-
withdrawWETHFinancialUnwrap WETH back to native ETH by withdrawing from the WETH contract. Burns your WETH and returns an equal amount of native ETH.
-
intent0xSwapFinancialSwap tokens on Ethereum, Optimism, Arbitrum, or Base via the 0x/Matcha aggregator. Automatically handles ERC20 approval if needed. Checks balance before swapping.
-
intentAaveBorrowFinancialBorrows tokens from Aave using your supplied collateral. By default, the variable rate mode (2) is used.
-
intentAaveRepayFinancialRepays your Aave debt. By default, the variable rate mode (2) is used for repayment.
-
intentCoinchanAirdropFinancialAirdrop a Coinchan token to multiple addresses in a single transaction.
-
intentCoinchanClaimVestedFinancialClaim vested liquidity for a locked Coinchan token. Only works if vesting was enabled at creation.
-
intentCollectFeesFinancialCollects all accumulated trading fees and any tokens from decreased liquidity for a Uniswap V3 LP position.
-
intentDecreaseLiquidityFinancialRemoves liquidity from a Uniswap V3 LP position. The removed tokens are not automatically collected — use intentCollectFees afterwards to withdraw them.
-
intentIncreaseLiquidityFinancialAdds more liquidity to an existing Uniswap V3 LP position identified by its NFT token ID.
-
intentMintPositionFinancialCreates a new Uniswap V3 liquidity position by minting an LP NFT. Requires both tokens to be approved for the Position Manager contract beforehand.
-
intentRenewWNSFinancialGenerate a transaction intent for renewing a .wei name.
-
intentStakeNaniFinancialStake NANI tokens to receive xNANI tokens, which can be used for governance
-
intentSwapFinancialSwap ERC20 or ERC6909 tokens via the zRouter. Automatically handles token approvals, finds the best route (including Matcha/0x aggregation), and executes the swap.
-
intentUnstakeNaniFinancialUnstake xNANI tokens back to NANI tokens
-
x402FetchFinancialFetch an HTTP resource, automatically paying with USDC via x402 if the server requires payment. Supports any x402-enabled API endpoint.
-
intentApproveFinancialCreates an intent to approve token spending. Supports
-
intentCoinchanMakeFinancialCreate a new Coinchan token, mint supplies and add initial liquidity via ZAMM
-
intentCoinchanMakeHoldFinancialCreate a new Coinchan token and hold liquidity for the creator instead of locking it.
-
intentCoinchanMakeLockedFinancialCreate a new Coinchan token with locked liquidity and optional vesting schedule.
-
intentRegisterSubdomainWNSFinancialGenerate a transaction intent for registering a subdomain under a .wei name.
-
intentRegisterWNSFinancialGenerate transaction intents for registering a .wei name. Returns the commit and reveal transactions needed for the two-step registration process.
-
intentSendTransactionFinancialSend an arbitrary transaction to any address. Specify a human-readable ABI signature with function name and arguments to encode calldata automatically, or provide raw hex data. ...
-
intentUnlockSlowFinancialUnlock a time-locked transfer in SLOW contract
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.