High-risk tools in Kosyak Evm
3 of the 50 tools in Kosyak Evm are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
encode_calldataExecuteBuild ABI-encoded calldata from a function signature + args (no RPC). Returns 0x<selector><encoded>. Symmetric to decode_transaction_input.
-
wait_for_storage_valueExecutePoll a storage slot until match. `expected` for exact value or `change: true` for any change from current. Returns matched value + elapsed, or times out.
-
wait_for_transactionExecuteWait for transaction confirmation (polls until mined).
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.