Critical-risk tools in Agentek Eth
38 of the 193 tools in Agentek Eth are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
intentReverseSlowTransferDestructiveReverse a pending transfer in SLOW contract
-
intentRevokeAllApprovalsDestructiveRevoke ALL active ERC-20 token approvals for the connected wallet on a specific chain. Scans for approvals first, then creates revoke transactions for each one. Use with caution...
-
intentRevokeApprovalDestructiveRevoke (set to zero) an ERC-20 token approval for a specific spender. This is equivalent to calling approve(spender, 0).
-
depositWETHFinancialWrap native ETH into WETH (Wrapped ETH) by depositing into the WETH contract. You receive an equal amount of WETH, an ERC20 token.
-
intent0xSwapFinancialSwap tokens on Ethereum, Optimism, Arbitrum, or Base via the 0x/Matcha aggregator. Automatically handles ERC20 approval if needed. Checks balance before swapping.
-
intentAaveBorrowFinancialBorrows tokens from Aave using your supplied collateral. By default, the variable rate mode (2) is used.
-
intentAaveDepositFinancialDeposits tokens into the Aave protocol to supply liquidity and earn interest.
-
intentAaveRepayFinancialRepays your Aave debt. By default, the variable rate mode (2) is used for repayment.
-
intentAaveWithdrawFinancialWithdraws tokens from Aave, redeeming your supplied assets (aTokens).
-
intentApproveFinancialCreates an intent to approve token spending. Supports
-
intentApproveSlowTransferFinancialGuardian approves a transfer in SLOW contract
-
intentCoinchanAirdropFinancialAirdrop a Coinchan token to multiple addresses in a single transaction.
-
intentCoinchanClaimVestedFinancialClaim vested liquidity for a locked Coinchan token. Only works if vesting was enabled at creation.
-
intentCoinchanMakeFinancialCreate a new Coinchan token, mint supplies and add initial liquidity via ZAMM
-
intentCoinchanMakeHoldFinancialCreate a new Coinchan token and hold liquidity for the creator instead of locking it.
-
intentCoinchanMakeLockedFinancialCreate a new Coinchan token with locked liquidity and optional vesting schedule.
-
intentCollectFeesFinancialCollects all accumulated trading fees and any tokens from decreased liquidity for a Uniswap V3 LP position.
-
intentDecreaseLiquidityFinancialRemoves liquidity from a Uniswap V3 LP position. The removed tokens are not automatically collected — use intentCollectFees afterwards to withdraw them.
-
intentDepositAcrossFinancialBridge ERC20 tokens cross-chain via Across Protocol. Automatically handles token approval and fetches optimal relay fees. Does not support native ETH.
-
intentDepositToSlowFinancialDeposit tokens or ETH into SLOW contract with a timelock
-
intentIncreaseLiquidityFinancialAdds more liquidity to an existing Uniswap V3 LP position identified by its NFT token ID.
-
intentMintPositionFinancialCreates a new Uniswap V3 liquidity position by minting an LP NFT. Requires both tokens to be approved for the Position Manager contract beforehand.
-
intentRegisterSubdomainWNSFinancialGenerate a transaction intent for registering a subdomain under a .wei name.
-
intentRegisterWNSFinancialGenerate transaction intents for registering a .wei name. Returns the commit and reveal transactions needed for the two-step registration process.
-
intentRenewWNSFinancialGenerate a transaction intent for renewing a .wei name.
-
intentSendTransactionFinancialSend an arbitrary transaction to any address. Specify a human-readable ABI signature with function name and arguments to encode calldata automatically, or provide raw hex data. ...
-
intentStakeNaniFinancialStake NANI tokens to receive xNANI tokens, which can be used for governance
-
intentSwapFinancialSwap ERC20 or ERC6909 tokens via the zRouter. Automatically handles token approvals, finds the best route (including Matcha/0x aggregation), and executes the swap.
-
intentTransferFinancialTransfer ERC20 tokens or native ETH to an address or ENS name. Supports ENS resolution, automatic decimal handling, and auto-selects the cheapest chain if chainId is omitted.
-
intentTransferFromFinancialTransfer ERC20 tokens from another address using transferFrom. Requires prior ERC20 approval from the
-
intentTransferPositionFinancialTransfers ownership of a Uniswap V3 LP NFT to another address using safeTransferFrom.
-
intentTransferSolFinancialTransfer native SOL to an address. Signs and submits when a Solana key is configured, otherwise returns an unsigned base64 transaction for you to sign.
-
intentTransferSplTokenFinancialTransfer an SPL token (including Token-2022 mints) to a wallet address, creating the recipient
-
intentUnlockSlowFinancialUnlock a time-locked transfer in SLOW contract
-
intentUnstakeNaniFinancialUnstake xNANI tokens back to NANI tokens
-
intentWithdrawFromSlowFinancialWithdraw unlocked tokens from SLOW contract
-
withdrawWETHFinancialUnwrap WETH back to native ETH by withdrawing from the WETH contract. Burns your WETH and returns an equal amount of native ETH.
-
x402FetchFinancialFetch an HTTP resource, automatically paying with USDC via x402 if the server requires payment. Supports any x402-enabled API endpoint.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.