Critical-risk tools in Tron
10 of the 97 tools in Tron are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
cancel_all_unfreeze_v2DestructiveCancel unstakings, all unstaked funds still in the waiting period will be re-staked, all unstaked funds that exceeded the 14-day waiting period will be automatically withdrawn t...
-
clear_abiDestructiveClear the on-chain ABI metadata of a contract (ClearABIContract). Requires the contract creator's wallet.
-
delete_proposalDestructiveDelete a governance proposal (SR only, only the proposal creator can delete it).
-
create_witnessFinancialApply to become a Super Representative (SR). Requires the configured wallet and burns 9999 TRX as application fee.
-
freeze_balance_v2FinancialFreeze TRX to get resources (Stake 2.0).
-
transfer_trc20FinancialTransfer TRC20 tokens to an address.
-
transfer_trxFinancialTransfer TRX to an address.
-
unfreeze_balance_v2FinancialUnfreeze TRX to release resources (Stake 2.0).
-
withdraw_balanceFinancialWithdraw accumulated voting rewards to the configured wallet's available balance.
-
withdraw_expire_unfreezeFinancialWithdraw expired unfrozen balance (Stake 2.0). Call this after the unfreezing period to return TRX to available balance.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.