Critical-risk tools in Question Market
10 of the 22 tools in Question Market are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
buy_sharesFinancialBuy outcome shares in an ACTIVE market. Provide either a target share count or a max USDC budget; if share count is omitted, the tool computes the largest purchasable position w...
-
claim_lp_feesFinancialMove earned LP trading fees from the pool
-
claim_lp_residualFinancialAfter a market resolves or is cancelled, withdraw your share of the remaining pool liquidity as an LP. Only callable on RESOLVED or CANCELLED markets. This is separate from LP f...
-
claim_winningsFinancialClaim winning shares from a RESOLVED market. Auto-detects the winning outcome and your full position if parameters are omitted. Payout is 1 USDC per winning share. Amounts in re...
-
create_marketFinancialCreate a new prediction market atomically. Supports 2-${MAX_ACTIVE_LP_OUTCOMES} outcomes. Provide blueprint to use the same logic for both main and dispute paths, or main_bluepr...
-
enter_lp_activeFinancialDeposit USDC as a liquidity provider in an ACTIVE market. You earn a share of trading fees (2% of each trade) proportional to your LP stake. Entry is blocked if any outcome pric...
-
refund_sharesFinancialRefund shares from a CANCELLED market at cost basis. If num_shares is omitted, the tool refunds your full position for the selected outcome. Amounts in responses are micro-USDC ...
-
request_testnet_tokensFinancialrequest_testnet_tokens
-
sell_sharesFinancialSell outcome shares back to an ACTIVE market. If num_shares is omitted, the tool reads the on-chain position and sells everything for that outcome. Requires an active wallet (ca...
-
withdraw_lp_feesFinancialClaim and withdraw all available LP trading fees to your wallet in one call. Combines claim_lp_fees + withdrawal into a single operation. Works on ACTIVE, RESOLVED, or CANCELLED...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.