[New Snap] UTL Protocol by Kenostod — Fee X-Ray + Passive Income for BSC DeFi

[Keno2121]

Checklist

• Is the Snap repository publicly accessible and linked in this ticket?
  • Source: https://github.com/Keno2121/kenostod-blockchain/tree/main/utl/metamask-snap
• Is the Snap distributed on npm and linked in this ticket?
  • npm: https://www.npmjs.com/package/kenostod-utl-snap (v2.3.0)
• Has an audit been performed and the audit report attached or linked in this issue?
  • Security review in progress — will attach when complete
• Is a complete list of discovered vulnerabilities from the audit documented in this issue?
  • Pending audit

Snap Details

Name: UTL Protocol by Kenostod
npm package: kenostod-utl-snap
Version: 2.3.0
Category: transaction-insights

What it does

UTL Protocol is a fee redistribution layer on BNB Smart Chain. This Snap provides:

1. Fee X-Ray — Real-time MEV risk detection on every transaction before signing (HIGH/MEDIUM/LOW). Shows estimated slippage loss and LP spread in BNB
2. Passive Income Tracking — Dashboard showing staked KENO balance, rewards earned (60% of all protocol fees), and auto-compound status
3. Loyalty Tiers — Bronze → Silver → Gold → Platinum → Diamond, tracked automatically
4. FAL™ Alerts — Daily Flash Arbitrage Loan opportunity push notifications
5. Weekly Report — Sunday notification with transaction stats and KENO earnings
6. Governance Weight — Voting power tracking for UTL Protocol proposals

Permissions

Permission	Purpose
snap_dialog	Fee X-Ray and dashboard panels shown before signing
snap_notify	FAL™ alerts and weekly earnings notifications
snap_manageState	Local wallet profile, tier, staking data (never leaves MetaMask)
endowment:rpc	Allow dApps to call snap methods (activate, dashboard, earnings)
endowment:network-access	Read-only calls to UTL Protocol public API
endowment:transaction-insight	Hook into transaction flow for Fee X-Ray
endowment:ethereum-provider	Read wallet address and active chain
endowment:cronjob	Daily 9AM UTC check for FAL™ opportunities

Security

• No private keys accessed or requested
• All network calls are read-only to utl.kenostodblockchain.com
• State stored locally in MetaMask snap sandboxed environment
• Snap source code fully public at linked repository

BSC Mainnet Contracts

• FeeCollector: 0xb9489B33Bd9bB835139369b1dD282fB44B2273d8 (BscScan)
• Staking: 0x77C3946A9FD5F509584F94e81C43efb25120c837
• Treasury: 0x54A01A5bf5096c351F166C15143eA9a9Af393C84
• Distribution: 0xdeE5a5456e394DB34F03c770e81eDC9B7F8FE167

Related PR: see add-kenostod-utl-snap branch

[Keno2121]

Security Audit Report — kenostod-utl-snap v2.3.0

A full internal security audit has been completed. Below is the executive summary. The complete PDF-ready report is available at:

https://kenostod-blockchain.onrender.com/utl-snap-security-audit.html

---

Summary of Findings

ID	Severity	Title	Status
UTL-2026-001	🟡 LOW	Wallet address stored without explicit confirmation pre-step	Acknowledged — fix scheduled for v2.4.0
UTL-2026-002	🔵 INFO	MEV risk heuristic uses keyword matching (conservative bias)	Documented — future improvement noted
UTL-2026-003	🔵 INFO	Cronjob runs daily regardless of recent activity	Mitigated by isOptedIn guard clause
UTL-2026-004	🔵 INFO	No snap-side rate limiting on RPC calls	Mitigated by MetaMask serialization + server-side rate limiting

Critical findings: 0 | High findings: 0 | Low: 1 | Informational: 3

---

Key Security Findings

✅ No private key access — Zero use of snap_getBip32Entropy, snap_getBip44Entropy, or any key derivation. Confirmed by full source scan.

✅ No transaction modification — The onTransaction handler returns only a content panel. It does not touch to, value, data, or gas fields.

✅ No data exfiltration — State stored in snap_manageState is sandboxed inside MetaMask. The only outbound network calls are 3 read-only GET requests to utl.kenostodblockchain.com with hard 4–5 second timeouts and graceful fallback.

✅ No XSS surface — All output uses MetaMask structured UI primitives (panel, text, heading, row, copyable). No raw HTML rendering, no innerHTML, no eval().

✅ All permissions justified — Every permission in snap.manifest.json has a documented, necessary purpose. No unnecessary permissions are requested. Key derivation permissions (endowment:keyring, snap_getBip44Entropy) are absent.

---

Permissions Justification Summary

Permission	Necessity	Risk
snap_dialog	Fee X-Ray and dashboard panels	None
snap_notify	Weekly report + FAL™ alerts	None
snap_manageState	Local profile storage (never leaves MetaMask)	Low
endowment:rpc (dapps only)	Allow UTL dApp to call snap methods	Low
endowment:network-access	3 read-only GET calls to UTL API	Low
endowment:transaction-insight	Fee X-Ray before signing	Informational
endowment:ethereum-provider	Read wallet address on opt-in	Low
endowment:cronjob	Daily 9AM UTC check	None

---

Sign-Off

Nickeo Coleman — Founder, Kenostod Blockchain Academy LLC / T.D.I.R. Foundation
Audit Date: May 2026
Full Report: https://kenostod-blockchain.onrender.com/utl-snap-security-audit.html

The snap is confirmed safe for MetaMask user distribution. No critical or high-severity issues identified.