multiversx-dapp-audit

Audit MultiversX React dApp components for wallet and transaction security vulnerabilities.

12|5|Updated Jan 28, 2026
One-click install
npx skills add https://github.com/multiversx/mx-ai-skills --skill multiversx-dapp-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: multiversx-dapp-audit
Source: https://github.com/multiversx/mx-ai-skills/tree/main/skills/multiversx-dapp-audit
Command: npx skills add https://github.com/multiversx/mx-ai-skills --skill multiversx-dapp-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities in frontend dApps built for the MultiversX ecosystem, focusing on secure wallet integration and transaction handling.

Core Features & Use Cases

  • Transaction Security: Detects and prevents payload manipulation and blind signing risks.
  • Data Handling: Enforces secure storage of sensitive information and access tokens.
  • XSS Prevention: Guards against cross-site scripting vulnerabilities in user-generated content and URL handling.
  • Use Case: Review a React dApp's code to ensure user funds are safe during transaction signing and that no sensitive data is exposed through API calls or local storage.

Quick Start

Use the multiversx-dapp-audit skill to review the provided React dApp code for security vulnerabilities.

Frequently Asked Questions about multiversx-dapp-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit MultiversX dApp frontend code for transaction security vulnerabilities?

To audit MultiversX dApp frontend code, review React components against TypeScript best practices to detect transaction payload manipulation and prevent blind signing. This process secures wallet integration by ensuring user funds remain safe during transaction construction and signing.

What is blind signing in MultiversX dApps and how do I prevent it?

Blind signing in MultiversX dApps occurs when users sign transactions without verifying manipulated payload data. Prevent it by auditing transaction construction logic in your React frontend to ensure full payload visibility and validate transaction parameters before wallet submission.

How do I prevent XSS vulnerabilities in MultiversX React dApps?

Prevent XSS vulnerabilities in MultiversX React dApps by reviewing user-generated content rendering and URL handling mechanisms. Enforce secure input sanitization and output encoding practices to guard against cross-site scripting attacks that could compromise wallet integrations.

Can I use this dApp security audit for React components handling sensitive data storage?

Yes, you can use this dApp security audit for React components handling sensitive data. It enforces secure storage of sensitive information and access tokens, ensuring local storage and API calls do not expose critical user data within the MultiversX ecosystem.

What's the best way to secure wallet integration in a MultiversX TypeScript dApp?

The best way to secure wallet integration in a MultiversX TypeScript dApp is to audit the frontend codebase for transaction handling vulnerabilities. Apply React and TypeScript best practices to validate transaction payloads, mitigate XSS risks, and protect sensitive access tokens.