{
  "projectId": "giza",
  "title": "Giza 官网的数据展示与钱包入口",
  "summary": "公开前端包含钱包连接组件及排行榜数据读取；Arma 产品应用的获取失败，因此本轮不评价自动资金配置引擎。",
  "scope": "实际公开网页发布的选定业务 JavaScript 包；REA 解析 2 个 JS 文件，静态分析。",
  "status": "partial",
  "analyzedAt": "2026-10-13T10:37:03.261698+00:00",
  "tool": {
    "name": "REA",
    "version": "6.4.0"
  },
  "findings": [
    {
      "title": "排行榜从 Giza API 单独读取",
      "detail": "布局包根据公开 API base 拼接 /api/v1/leaderboard 与 season 参数并通过查询层获取结果。它属于前端数据读取路径，不能证明排行榜数字或收益已独立核验。",
      "evidenceType": "observed",
      "evidenceIds": [
        "ev_fbc946e0e833e8f308e196db4649c7e26d4a99f4e2e6a91bdc38d697e632c14a"
      ],
      "sourceUrls": [
        "https://gizaprotocol.ai/_next/static/chunks/674186e3-60e1325b08f90df9.js?dpl=dpl_BwbRDjwqYaLQWRNTCzDA7VVmsm4D",
        "https://gizaprotocol.ai/_next/static/chunks/app/layout-234a901b93ede6fc.js?dpl=dpl_BwbRDjwqYaLQWRNTCzDA7VVmsm4D"
      ]
    },
    {
      "title": "钱包连接依赖通用组件",
      "detail": "另一发行块包含链、账户与钱包连接界面组件。存在这些组件并不意味着用户已授权资金操作，也不能证明 Arma 的策略或签名控制。",
      "evidenceType": "code_inference",
      "evidenceIds": [
        "ev_fbc946e0e833e8f308e196db4649c7e26d4a99f4e2e6a91bdc38d697e632c14a"
      ],
      "sourceUrls": [
        "https://gizaprotocol.ai/_next/static/chunks/674186e3-60e1325b08f90df9.js?dpl=dpl_BwbRDjwqYaLQWRNTCzDA7VVmsm4D",
        "https://gizaprotocol.ai/_next/static/chunks/app/layout-234a901b93ede6fc.js?dpl=dpl_BwbRDjwqYaLQWRNTCzDA7VVmsm4D"
      ]
    }
  ],
  "limitations": [
    "Arma 应用入口本轮 TLS 获取失败，交易执行相关实现未取得。",
    "排行榜数据本身未拉取、复算或审计。",
    "静态代码不证明运行行为、完整风控、成交或收益；未审计服务端。",
    "没有登录、读取账户、连接钱包、签名、交易或执行目标代码。"
  ],
  "artifacts": [
    {
      "label": "674186e3-60e1325b08f90df9.js",
      "url": "https://gizaprotocol.ai/_next/static/chunks/674186e3-60e1325b08f90df9.js?dpl=dpl_BwbRDjwqYaLQWRNTCzDA7VVmsm4D",
      "sha256": "f44608e6d141cab334a3841766235a0b4b5b15df3c41c5f1ab228fa4b4839326"
    },
    {
      "label": "layout-234a901b93ede6fc.js",
      "url": "https://gizaprotocol.ai/_next/static/chunks/app/layout-234a901b93ede6fc.js?dpl=dpl_BwbRDjwqYaLQWRNTCzDA7VVmsm4D",
      "sha256": "da5276604177cf7ed063931076a58d1497d337b85ee73d6ab7c86ceae25f09f5"
    }
  ],
  "evidenceIds": [
    "ev_fbc946e0e833e8f308e196db4649c7e26d4a99f4e2e6a91bdc38d697e632c14a"
  ],
  "reportUrl": "/research/rea/giza.json",
  "coverage": {
    "parsedFiles": 2,
    "parseFailures": 0,
    "semanticCoverage": "unknown",
    "rootArtifactSha256": "fcf639455c292385e8802d30a371a4ad4e489b475783f3cc5b2bfa5137fc3c05",
    "inputFileCount": 2,
    "inputBytes": 165930,
    "analysisResult": "completed"
  }
}