High-risk tools in Avalanche
7 of the 16 tools in Avalanche are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
deploy_contractExecuteDeploy compiled bytecode to Avalanche using a deployer key from the AVAKIT_DEPLOYER_KEY env var. Fuji testnet by default; mainnet (c-chain) requires confirm:true.
-
devnet_launch_l1ExecuteCreate a single custom Subnet-EVM L1 and deploy it locally. Returns the exit code and log tail; read the chain
-
devnet_spin_upExecuteCreate two local Avalanche L1s with Interchain Messaging and a relayer, and deploy them locally. Idempotent. Takes a few minutes.
-
devnet_startExecuteStart the local Avalanche network.
-
devnet_stopExecuteStop the local Avalanche network.
-
icm_deploy_messengersExecuteDeploy the AvaKitMessenger contract on each running L1 that doesn
-
icm_sendExecuteSend a string from one L1
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.