Sato Hub
← Sato Check

Sato Check · Package

hardhat

npm:hardhat · v3.18.0 · sha256:0d80de65b130 · as of 2026-09-26

Does it take your key?
traced
It asks for a private key or seed phrase in its setup.
Our static read of the published artifact found it.
Does your key leave?
no evidence
Not yet run — we have not run this version with planted test keys.
No evidence line on file for this question yet.
Can it move funds on its own?
no evidence
Unknown — we could not read what it exposes.
No evidence line on file for this question yet.
What changed?
no evidence
First profile of this subject — nothing to compare yet.
No evidence line on file for this question yet.

Is this your project? Respond →Dispute this reading

Hosts contacted

HostWhenRoleEvidence
amoy.polygonscan.comcodeothertraced
api-explorer.linea.buildcodeothertraced
api-explorer.sepolia.linea.buildcodeothertraced
arbiscan.iocodeothertraced
arbitrum-nova.blockscout.comcodeothertraced
arbitrum-sepolia.blockscout.comcodeothertraced
arbitrum.blockscout.comcodeothertraced
base-sepolia.blockscout.comcodeothertraced
base.blockscout.comcodeothertraced
basescan.orgcodeothertraced
binaries.soliditylang.orgcodeothertraced
bscscan.comcodeothertraced
cardona-zkevm.polygonscan.comcodeothertraced
era.zksync.networkcodeothertraced
eth-hoodi.blockscout.comcodeothertraced
eth-sepolia.blockscout.comcodeothertraced
eth.blockscout.comcodeothertraced
etherscan.iocodeothertraced
explorer-sepolia.inkonchain.comcodeothertraced
explorer.harmony.onecodeothertraced
explorer.inkonchain.comcodeothertraced
explorer.linea.buildcodeothertraced
explorer.mainnet.aurora.devcodeothertraced
explorer.sepolia.linea.buildcodeothertraced
explorer.testnet.aurora.devcodeothertraced
explorer.testnet.harmony.onecodeothertraced
ftmscout.comcodeothertraced
github.comcoderegistrytraced
gnosis-chiado.blockscout.comcodeothertraced
gnosis.blockscout.comcodeothertraced
gnosisscan.iocodeothertraced
hardhat.orgcodevendortraced
hoodi.etherscan.iocodeothertraced
lineascan.buildcodeothertraced
moonbase.moonscan.iocodeothertraced
moonbeam.moonscan.iocodeothertraced
moonriver.moonscan.iocodeothertraced
nova.arbiscan.iocodeothertraced
optimism-sepolia.blockscout.comcodeothertraced
optimism.blockscout.comcodeothertraced
optimistic.etherscan.iocodeothertraced
polygon.blockscout.comcodeothertraced
polygonscan.comcodeothertraced
raw.githubusercontent.comcoderegistrytraced
registry.npmjs.orgcoderegistrytraced
sepolia-era.zksync.networkcodeothertraced
sepolia-optimism.etherscan.iocodeothertraced
sepolia.arbiscan.iocodeothertraced
sepolia.basescan.orgcodeothertraced
sepolia.etherscan.iocodeothertraced
sepolia.lineascan.buildcodeothertraced
snowtrace.iocodeothertraced
solc-linux-arm64-mirror.hardhat.orgcodevendortraced
testnet.bscscan.comcoderpctraced
testnet.snowtrace.iocoderpctraced
www.google-analytics.comcodeothertraced
zkevm.blockscout.comcodeothertraced
zkevm.polygonscan.comcodeothertraced
zksync-sepolia.blockscout.comcodeothertraced
zksync.blockscout.comcodeothertraced
Evidence (62 lines)
  • tracedT-hosts2026-09-26

    amoy.polygonscan.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    api-explorer.linea.build appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    api-explorer.sepolia.linea.build appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    arbiscan.io appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    arbitrum-nova.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    arbitrum-sepolia.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    arbitrum.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    base-sepolia.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    base.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    basescan.org appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    binaries.soliditylang.org appears in shipped code (other).

    dist/src/internal/builtin-plugins/solidity/build-system/compiler/downloader.js

  • tracedT-hosts2026-09-26

    bscscan.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    cardona-zkevm.polygonscan.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    era.zksync.network appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    eth-hoodi.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    eth-sepolia.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    eth.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    etherscan.io appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    explorer-sepolia.inkonchain.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    explorer.harmony.one appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    explorer.inkonchain.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    explorer.linea.build appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    explorer.mainnet.aurora.dev appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    explorer.sepolia.linea.build appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    explorer.testnet.aurora.dev appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    explorer.testnet.harmony.one appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    ftmscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    github.com appears in shipped code (registry).

    dist/src/internal/cli/init/init.js

  • tracedT-hosts2026-09-26

    gnosis-chiado.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    gnosis.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    gnosisscan.io appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    hardhat.org appears in shipped code (vendor).

    dist/src/internal/constants.js

  • tracedT-hosts2026-09-26

    hoodi.etherscan.io appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    lineascan.build appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    moonbase.moonscan.io appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    moonbeam.moonscan.io appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    moonriver.moonscan.io appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    nova.arbiscan.io appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    optimism-sepolia.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    optimism.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    optimistic.etherscan.io appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    polygon.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    polygonscan.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    raw.githubusercontent.com appears in shipped code (registry).

    dist/src/internal/cli/banner-manager.js

  • tracedT-hosts2026-09-26

    registry.npmjs.org appears in shipped code (registry).

    dist/src/internal/utils/package.js

  • tracedT-hosts2026-09-26

    sepolia-era.zksync.network appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    sepolia-optimism.etherscan.io appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    sepolia.arbiscan.io appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    sepolia.basescan.org appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    sepolia.etherscan.io appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    sepolia.lineascan.build appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    snowtrace.io appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    solc-linux-arm64-mirror.hardhat.org appears in shipped code (vendor).

    dist/src/internal/builtin-plugins/solidity/build-system/compiler/downloader.js

  • tracedT-hosts2026-09-26

    testnet.bscscan.com appears in shipped code (rpc).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    testnet.snowtrace.io appears in shipped code (rpc).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    www.google-analytics.com appears in shipped code (other).

    dist/src/internal/cli/telemetry/analytics/subprocess.js

  • tracedT-hosts2026-09-26

    zkevm.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    zkevm.polygonscan.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    zksync-sepolia.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-hosts2026-09-26

    zksync.blockscout.com appears in shipped code (other).

    dist/src/internal/builtin-plugins/network-manager/chain-descriptors.js

  • tracedT-key-handling2026-09-26

    Turns key material it is GIVEN into an account or signer (mnemonicToSeedSync()); no read of a key from the environment or a key file was found. A signing library does this.

    dist/src/internal/builtin-plugins/network-manager/accounts/derive-private-keys.js:41

  • declaredD-env-key2026-09-26

    Setup names Deployer private key for contract deployment (not required t as something to provide.

    deploy_spec.requires

Limits

  • The observed lane has not run on this version: not yet run on this version
  • Traced analysis follows flows inside one module only; a key handed from one module to another is not followed.
  • The observed lane has not run on this version.
  • No tool inventory was available, so fund actions were not read.

A profile describes what we read and ran, with dates. It is not a safety rating, an audit or an endorsement, and "not found" is not "not there".

sato.custody/v1 · custody-1

Maintain this project? Respond to this reading

Loading sign-in…