Critical-risk tools in Griphook
32 of the 67 tools in Griphook are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
strato.admin.remove-adminDestructiveRevoke administrator access.
-
strato.bridge.request-withdrawalFinancialSubmit a withdrawal request to an external chain.
-
strato.cdp.claim-junior-noteFinancialClaim junior note rewards.
-
strato.cdp.liquidateFinancialLiquidate an unhealthy CDP position.
-
strato.cdp.mintFinancialMint USDST against collateral.
-
strato.cdp.mint-maxFinancialMint maximum safe USDST.
-
strato.cdp.open-junior-noteFinancialOpen a junior note position for bad debt.
-
strato.cdp.repayFinancialRepay USDST debt.
-
strato.cdp.repay-allFinancialRepay all debt for an asset.
-
strato.cdp.top-up-junior-noteFinancialAdd USDST to junior note.
-
strato.cdp.withdrawFinancialWithdraw collateral from a vault.
-
strato.cdp.withdraw-maxFinancialWithdraw maximum safe collateral.
-
strato.lending.borrowFinancialBorrow from lending pool.
-
strato.lending.borrow-maxFinancialBorrow the maximum available USDST.
-
strato.lending.deposit-liquidityFinancialDeposit into lending pool.
-
strato.lending.liquidateFinancialLiquidate a lending loan.
-
strato.lending.repayFinancialRepay outstanding debt.
-
strato.lending.repay-allFinancialRepay all debt.
-
strato.lending.safety-redeemFinancialRedeem sUSDST shares.
-
strato.lending.safety-redeem-allFinancialRedeem all sUSDST shares.
-
strato.lending.safety-stakeFinancialStake USDST into safety module.
-
strato.lending.sweep-reservesFinancialAdmin: sweep protocol reserves.
-
strato.lending.withdraw-collateral-maxFinancialWithdraw maximum available collateral for an asset.
-
strato.lending.withdraw-liquidityFinancialWithdraw from lending pool.
-
strato.rewards.claimFinancialClaim all pending CATA rewards from RewardsChef.
-
strato.rewards.claim-activityFinancialClaim rewards for a specific activity.
-
strato.rewards.claim-all-activitiesFinancialClaim all rewards across activities.
-
strato.swap.add-liquidityFinancialProvide both tokens to a pool.
-
strato.swap.add-liquidity-singleFinancialProvide liquidity using only one token.
-
strato.swap.executeFinancialSwap within an existing pool.
-
strato.tokens.transferFinancialTransfer tokens to another address.
-
strato.tokens.transfer-fromFinancialTransfer tokens on behalf of another address.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.