Sato Hub
Package

nansen-cli

npm:nansen-cli · v2.5.0 · sha256:5ffe8a04e082 · as of 2026-11-10

Does it take your key?
no evidence
No private-key read found in what we read of its setup and published code — the limits say how much that was.
No evidence line on file for this question yet.
Does your key leave?
no evidence
Not yet run — we have not run this version with planted test keys.
No evidence line on file for this question yet.
Can it move funds on its own?
declared
Unknown — we could not read what it exposes.
The project says so — README, config, env list or tool description.
What changed?
traced
Since 2.4.0: no longer references eth.llamarpc.com.
Our static read of the published artifact found it.

Is this your project? Respond →Dispute this reading

Hosts contacted

HostWhenRoleEvidence
api.banansen.devcodeothertraced
api.devnet.solana.comcoderpctraced
api.ensideas.comcodeothertraced
api.hyperliquid-testnet.xyzcodeothertraced
api.hyperliquid.xyzcodeothertraced
api.mainnet-beta.solana.comcoderpctraced
api.nansen.aicodevendortraced
api.privy.iocodeothertraced
api.relay.linkcodeothertraced
api.testnet.solana.comcoderpctraced
app.nansen.aicodevendortraced
arb1.arbitrum.iocodeothertraced
arbiscan.iocodeothertraced
basescan.orgcodeothertraced
bi-data-sources.nansen.aicodevendortraced
bsc-dataseed.binance.orgcodeothertraced
bsc-dataseed.bnbchain.orgcodeothertraced
bscscan.comcodeothertraced
dashboard.privy.iocodeothertraced
docs.nansen.aicodevendortraced
docs.x402.orgcodeothertraced
ethereum-rpc.publicnode.comcoderpctraced
etherscan.iocodeothertraced
github.comcoderegistrytraced
idp.banansen.devcodeothertraced
idp.nansen.aicodevendortraced
lineascan.buildcodeothertraced
mainnet.base.orgcoderpctraced
mantlescan.xyzcodeothertraced
nansen.aicodevendortraced
optimistic.etherscan.iocodeothertraced
polygon-rpc.comcoderpctraced
polygonscan.comcodeothertraced
registry.npmjs.orgcoderegistrytraced
relay.linkcodeothertraced
rpc.xlayer.techcoderpctraced
snowtrace.iocodeothertraced
solscan.iocodeothertraced
trading-api.nansen.aicodevendortraced
Evidence (42 lines)
  • tracedT-install-script2026-11-10

    package.json runs postinstall: node scripts/postinstall.js.

    package.json

  • tracedT-hosts2026-11-10

    api.banansen.dev appears in shipped code (other).

    src/auth-credentials.js

  • tracedT-hosts2026-11-10

    api.devnet.solana.com appears in shipped code (rpc).

    src/x402-svm.js

  • tracedT-hosts2026-11-10

    api.ensideas.com appears in shipped code (other).

    src/ens.js

  • tracedT-hosts2026-11-10

    api.hyperliquid-testnet.xyz appears in shipped code (other).

    src/hl-env.js

  • tracedT-hosts2026-11-10

    api.hyperliquid.xyz appears in shipped code (other).

    src/bridge.js

  • tracedT-hosts2026-11-10

    api.mainnet-beta.solana.com appears in shipped code (rpc).

    src/rpc-urls.js

  • tracedT-hosts2026-11-10

    api.nansen.ai appears in shipped code (vendor).

    src/auth-credentials.js

  • tracedT-hosts2026-11-10

    api.privy.io appears in shipped code (other).

    src/privy.js

  • tracedT-hosts2026-11-10

    api.relay.link appears in shipped code (other).

    src/bridge.js

  • tracedT-hosts2026-11-10

    api.testnet.solana.com appears in shipped code (rpc).

    src/x402-svm.js

  • tracedT-hosts2026-11-10

    app.nansen.ai appears in shipped code (vendor).

    src/api.js

  • tracedT-hosts2026-11-10

    arb1.arbitrum.io appears in shipped code (other).

    src/rpc-urls.js

  • tracedT-hosts2026-11-10

    arbiscan.io appears in shipped code (other).

    src/transfer.js

  • tracedT-hosts2026-11-10

    basescan.org appears in shipped code (other).

    src/trading.js

  • tracedT-hosts2026-11-10

    bi-data-sources.nansen.ai appears in shipped code (vendor).

    src/telemetry.js

  • tracedT-hosts2026-11-10

    bsc-dataseed.binance.org appears in shipped code (other).

    src/rpc-urls.js

  • tracedT-hosts2026-11-10

    bsc-dataseed.bnbchain.org appears in shipped code (other).

    src/rpc-urls.js

  • tracedT-hosts2026-11-10

    bscscan.com appears in shipped code (other).

    src/transfer.js

  • tracedT-hosts2026-11-10

    dashboard.privy.io appears in shipped code (other).

    src/privy.js

  • tracedT-hosts2026-11-10

    docs.nansen.ai appears in shipped code (vendor).

    src/cli.js

  • tracedT-hosts2026-11-10

    docs.x402.org appears in shipped code (other).

    src/api.js

  • tracedT-hosts2026-11-10

    ethereum-rpc.publicnode.com appears in shipped code (rpc).

    src/rpc-urls.js

  • tracedT-hosts2026-11-10

    etherscan.io appears in shipped code (other).

    src/transfer.js

  • tracedT-hosts2026-11-10

    github.com appears in shipped code (registry).

    src/cli.js

  • tracedT-hosts2026-11-10

    idp.banansen.dev appears in shipped code (other).

    src/auth-credentials.js

  • tracedT-hosts2026-11-10

    idp.nansen.ai appears in shipped code (vendor).

    src/auth-credentials.js

  • tracedT-hosts2026-11-10

    lineascan.build appears in shipped code (other).

    src/transfer.js

  • tracedT-hosts2026-11-10

    mainnet.base.org appears in shipped code (rpc).

    src/rpc-urls.js

  • tracedT-hosts2026-11-10

    mantlescan.xyz appears in shipped code (other).

    src/transfer.js

  • tracedT-hosts2026-11-10

    nansen.ai appears in shipped code (vendor).

    src/cli.js

  • tracedT-hosts2026-11-10

    optimistic.etherscan.io appears in shipped code (other).

    src/transfer.js

  • tracedT-hosts2026-11-10

    polygon-rpc.com appears in shipped code (rpc).

    src/rpc-urls.js

  • tracedT-hosts2026-11-10

    polygonscan.com appears in shipped code (other).

    src/transfer.js

  • tracedT-hosts2026-11-10

    registry.npmjs.org appears in shipped code (registry).

    src/update-check.js

  • tracedT-hosts2026-11-10

    relay.link appears in shipped code (other).

    src/trading.js

  • tracedT-hosts2026-11-10

    rpc.xlayer.tech appears in shipped code (rpc).

    src/rpc-urls.js

  • tracedT-hosts2026-11-10

    snowtrace.io appears in shipped code (other).

    src/transfer.js

  • tracedT-hosts2026-11-10

    solscan.io appears in shipped code (other).

    src/limit-order.js

  • tracedT-hosts2026-11-10

    trading-api.nansen.ai appears in shipped code (vendor).

    src/limit-order.js

  • declaredD-doc-funds2026-11-10

    The project's own text says it carries out transactions: "Use it for both analytics and execution: nansen research ... returns structured on-chain data, while nansen trade quote / nansen trade execute handle DEX swaps on Solana and Base, including cross-chain bridges."

    nansen-cli@2.5.0/README.md (line 8)

  • declaredD-doc-funds2026-11-10

    The project's own text says it carries out transactions: "Trade: quote, execute, bridge-status, limit-order — DEX swaps on Solana and Base, cross-chain bridges, and Solana limit orders."

    nansen-cli@2.5.0/README.md (line 170)

Limits

  • The observed lane has not run on this version: not yet run on this version
  • Traced analysis follows flows inside one module and one hop across a relative import; a longer chain is not followed.
  • The observed lane has not run on this version.
  • No tool inventory was available, so fund actions were not read.

A profile describes what we read and ran, with dates. It is not a safety rating, an audit or an endorsement, and "not found" is not "not there".

sato.custody/v1 · custody-3

Maintain this project? Respond to this reading

Loading sign-in…