Critical-risk tools in Near Hydra
10 of the 21 tools in Near Hydra are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
hydra_swap_executeFinancialExecute an end-to-end cross-chain swap via NEAR Intents 1Click. Auto-routes the origin send by asset: NEAR-side FTs use ft_transfer; bridged EVM (ETH/ARB/BASE/POL/BSC/OP/AVAX/Au...
-
hydra_swap_submit_depositFinancialNotify 1Click that the deposit transaction has been broadcast. depositAddress comes from a non-dry quote; txHash is the transaction hash on the chain you sent funds on.
-
hydra_ensure_gasFinancialTop up the derived foreign-chain address with native gas, via a small NEAR Intents 1Click swap. Checks current balance; if below minBalance, swaps a NEAR-side asset (default wNE...
-
hydra_send_btcFinancialSend BTC from a Chain-Signature-derived Bitcoin address. UTXO selection via Mempool API. SAFE: dry=true returns the plan; dry=false signs via MPC and broadcasts. Amount in satos...
-
hydra_send_evmFinancialSend a transaction on an EVM chain from a Chain-Signature-derived address. Supports native value (valueWei) or ERC-20 transfer (erc20). SAFE: dry=true returns the prepared unsig...
-
hydra_send_ftFinancialSend a NEP-141 fungible token from the configured account. Calls ft_transfer with 1 yoctoNEAR deposit. SAFE: dry=true by default. Example: send wNEAR via tokenContract=
-
hydra_send_nearFinancialSend native NEAR from the configured account. SAFE BY DEFAULT: dry=true returns the plan without broadcasting. Set dry=false to actually send. Requires policy.readOnly=false. am...
-
hydra_send_solanaFinancialSend native SOL from a Chain-Signature-derived Solana address. SAFE: dry=true returns the plan. Amount in lamports (1 SOL = 1,000,000,000 lamports). Requires the derived address...
-
hydra_send_splFinancialSend a Solana SPL token from a Chain-Signature-derived Solana address. Auto-derives source + destination ATAs and creates the destination ATA on-the-fly if it doesn
-
hydra_swap_quoteFinancialGet a NEAR Intents 1Click cross-chain swap quote. Set dry=true to simulate (no deposit address); dry=false returns a deposit address you must send the input asset to. Asset IDs ...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.