vulnerabilities describes one detected risk. The fields below tell you what it is, how serious it is, and whether it is currently active.
The risk object
string
The risk category. See the full list below. Treat it as an open set and handle an unknown value gracefully.
string
How seriously this risk affects a holder:
critical, warning, or info.string
A plain-language explanation of the risk.
string
A representative snippet of the relevant code for this risk.
string[]
All relevant snippets when several functions share the same risk.
code is the first of them. Present only when more than one applies.boolean | null
Whether this specific risk is currently neutralized, for example when the controlling owner has renounced.
null when not applicable.string | null
A display-ready, human-readable explanation of the current state, e.g.
"Owner renounced" or "MINTER_ROLE has 2 active holders".Impact tiers
Categories
Thetype field uses the values below. The set is additive. New categories may be introduced, so handle an unknown value gracefully.