{
  "projectId": "wayfinder",
  "title": "Wayfinder｜钱包请求与交易顺序",
  "summary": "选定客户端模块明确区分身份请求签名和链上交易发送，并在多笔操作中逐笔等待回执；策略生成和服务端执行范围仍未知。",
  "scope": "wayfinder.ai 公开发布的 useSigningWallet 与 walletRequest 两个模块；REA 成功解析 2 个文件，静态分析。",
  "status": "partial",
  "analyzedAt": "2026-10-13T10:58:47.852377+00:00",
  "tool": {
    "name": "REA",
    "version": "6.4.0"
  },
  "findings": [
    {
      "title": "签名钱包可在已关联钱包间选择",
      "detail": "useSigningWallet 合并已连接和账户关联的 0x 钱包，并记住选中的地址；walletRequest 用 personal_sign 构造 API 请求签名头。该身份请求签名与后续 eth_sendTransaction 是不同调用。",
      "evidenceType": "observed",
      "evidenceIds": [
        "ev_de259032b1776ed91a4df4583f9a9467fc31bdfe48b19c9577558735a4296ede"
      ],
      "sourceUrls": [
        "https://wayfinder.ai:443/assets/useSigningWallet-BMrZQgYu.js",
        "https://wayfinder.ai:443/assets/walletRequest-DAzz4M7M.js"
      ]
    },
    {
      "title": "交易序列检查链并等待回执",
      "detail": "发送分支按顺序处理交易，尝试切换到目标链，调用 eth_sendTransaction 后等待回执；中间交易等待 2 个链上确认，末笔等待 1 个链上确认，回执非 success 则抛错。这里只能确认客户端逻辑，不能证明链上最终性或所有 Agent 路径都会经过它。",
      "evidenceType": "code_inference",
      "evidenceIds": [
        "ev_de259032b1776ed91a4df4583f9a9467fc31bdfe48b19c9577558735a4296ede"
      ],
      "sourceUrls": [
        "https://wayfinder.ai:443/assets/useSigningWallet-BMrZQgYu.js",
        "https://wayfinder.ai:443/assets/walletRequest-DAzz4M7M.js"
      ]
    }
  ],
  "limitations": [
    "仅分析两个已发布钱包适配模块，未审计生成交易的 Agent、合约和服务端签名校验。",
    "链切换检测在无法读取 chainId 时另有兼容分支；未用实际钱包测试。",
    "静态代码不证明运行行为、完整风控、成交或收益；未审计服务端。",
    "没有登录、读取账户、连接钱包、签名、交易或执行目标代码。"
  ],
  "artifacts": [
    {
      "label": "useSigningWallet-BMrZQgYu.js",
      "url": "https://wayfinder.ai:443/assets/useSigningWallet-BMrZQgYu.js",
      "sha256": "6b7bca4282c09d51d6e04fc67420864555ac1c27d00587f23288c1618e766a9e"
    },
    {
      "label": "walletRequest-DAzz4M7M.js",
      "url": "https://wayfinder.ai:443/assets/walletRequest-DAzz4M7M.js",
      "sha256": "81197eba80a55af86ea3b9064106b0b3f520bf97ae3ee9facafd17b9de257aed"
    }
  ],
  "evidenceIds": [
    "ev_de259032b1776ed91a4df4583f9a9467fc31bdfe48b19c9577558735a4296ede"
  ],
  "reportUrl": "/research/rea/wayfinder.json",
  "coverage": {
    "parsedFiles": 2,
    "parseFailures": 0,
    "semanticCoverage": "unknown",
    "rootArtifactSha256": "09e0468cd8285a9443363398364a90b25f22a1283f059b6c12afbecd742aeef3",
    "inputFileCount": 2,
    "inputBytes": 4253,
    "analysisResult": "completed"
  }
}