Evidence row 126949

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://x402.tokenizen.nl/api/bug-intel"
    ]
  ],
  "name": "x402.tokenizen.nl/api/bug-intel",
  "owner_address": "0x015eb036560216b3051339061ff68a207e0fe88f",
  "raw": {
    "accepts": [
      {
        "amount": "5000000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxAmountRequired": "5000000",
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0x015Eb036560216B3051339061FF68A207E0fe88f",
        "scheme": "exact"
      }
    ],
    "description": "Bug Bounty Intelligence: AI-generated hypotheses for the Solidity in a public GitHub repo. Not an audit. It reads the files most likely to move funds first, in at most six parts, and the report states how much of the code it read. Usually done within the hour. Check your repo first, for free: GET /api/bug-intel/precheck?repo=owner/name",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "contact": "jij@voorbeeld.nl",
              "repo": "owner/repo"
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "estimatedHours": 24,
              "jobId": "bi-1786800000",
              "note": "Poll pollUrl tot status = \"complete\".",
              "pollUrl": "https://x402.tokenizen.nl/api/bug-intel/bi-1786800000",
              "price_paid_usd": "5.00",
              "repo": "owner/repo",
              "reportUrl": "https://x402.tokenizen.nl/api/bug-intel/bi-1786800000/report",
              "status": "queued"
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "type": "object"
                },
                "bodyType": {
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "GET",
                    "POST"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "additionalProperties": {
                    "type": "string"
                  },
                  "properties": {},
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type",
                "example"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      },
      "offer-receipt": {
        "info": {
          "offers": [
            {
              "acceptIndex": 0,
              "format": "eip712",
              "payload": {
                "amount": "5000000",
                "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
                "network": "eip155:8453",
                "payTo": "0x015Eb036560216B3051339061FF68A207E0fe88f",
                "resourceUrl": "https://x402.tokenizen.nl/api/bug-intel",
                "scheme": "exact",
                "validUntil": 1792955177,
                "version": 1
              },
              "signature": "0x94b6ddc37b27bdccbbe61dd345c0aa461452cc6d9e9b10951c7df34fac1073034518319fd8603345eeb8db249152651f26d2f98e87c9eeedd8ff4d4dc314bb381b"
            }
          ]
        }
      },
      "piprail": {
        "client": {
          "note": "No proprietary client is required. Any x402 client that implements the exact scheme on eip155:8453 can pay this endpoint."
        },
        "docs": {
          "agents": "https://github.com/holistis/agent-receipt-verify",
          "home": "https://tokenizen.nl",
          "pay": "https://x402.org"
        },
        "instruction": "tokenizen x402 payment endpoint. Pay 5.00 USDC on eip155:8453 to 0x015Eb036560216B3051339061FF68A207E0fe88f with an EIP-3009 signature in the PAYMENT-SIGNATURE header. The receipt you get back can be verified independently with npx -y agent-receipt-verify. Docs: https://tokenizen.nl.",
        "name": "tokenizen vulnerability pattern search",
        "pay": [
          {
            "amount": "5000000",
            "amountFormatted": "5.00",
            "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
            "how": "Sign an EIP-3009 transferWithAuthorization for this amount to payTo and resubmit with the PAYMENT-SIGNATURE header. Any x402 client that speaks the exact scheme works.",
            "network": "eip155:8453",
            "payTo": "0x015Eb036560216B3051339061FF68A207E0fe88f",
            "scheme": "exact",
            "symbol": "USDC"
          }
        ],
        "protocol": "x402",
        "verify": {
          "note": "The receipt this endpoint returns can be checked independently, without trusting us.",
          "source": "https://github.com/holistis/agent-receipt-verify",
          "tool": "npx -y agent-receipt-verify"
        },
        "version": "2",
        "what": "This is an x402 \"402 Payment Required\" endpoint. Pay one of the offered rails to access it."
      }
    },
    "lastUpdated": "2026-10-25T18:07:36.358Z",
    "quality": {
      "l30DaysTotalCalls": 1,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-10-25T18:07:35.913Z"
    },
    "resource": "https://x402.tokenizen.nl/api/bug-intel",
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Bug Bounty Intelligence: AI-generated hypotheses for the Solidity in a public GitHub repo. Not an audit. It reads the files most likely to move funds first, in at most six parts, and the report states how much of the code it read. Usually done within the hour. Check your repo first, for free: GET /api/bug-intel/precheck?repo=owner/name"
}

What the leaf hashes

{"body":"bd66c9eaac5fab94d48db1cc97c09cc2c5a38bf93fc664c226665067d2f9fb12","id":126949,"kind":"listing","method":"baseline/1","observed_us":1793025637288783,"prev":null,"subject":"x402_bazaar:https://x402.tokenizen.nl/api/bug-intel","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0xd47b2231be7d003c45f98e428c5d9a67da2c26d07f7ccafe1bee2e5fd497c01b
2. 0x43d0ef8d8e98031267ae3ef815bb577f21e86c83dca986239fe3c51b3993837e
3. 0x420e69334c7e4e48d4cbcf8afa465322e7dd5368dd77a026f19295b06b5b26d4
4. 0xeee827fe9e994f2e2a41dfc6b47c2e31ab99d8d8e903dfb1ebabc0ffae296abd
5. 0x4411a12c6ad02be510a7fb7d34cada876cc7ddc55e08274962852c7a515805d0
6. 0x827078f649bef22ff2ad68c5445f6a9b9a1dc6eb2ac6b02e49f038974a2223a6
7. 0xccfd5576b3a064e49d528a3b241d0a5b4ca9e3ffec43bc3113fb68856e9428aa
8. 0xf7d9bda777fd3b4e8ea45e93b22c253829aa40a0d126fe73cab8307f454341ef
9. 0x950e71a3f1d793f64de204e2ffd6528faf6ebe1fd4463a16429f7f0525ca7ec0
10. 0xbf2ea8422e4d4634187236ad26741d988ab947590ee32bccf49379c5b69d0711
11. 0x13af2618b202e3256bff92107d30a646eb897d2992ea1f3e08e75bf4bef84c31
12. 0x7026808261896a203198354548e5e8cabce4a06e89d077c172084841b47ae119
13. 0x3199db04c2c73c3483386a86bf503eafde5af103465608156e2e5f42e72a6fbe
14. 0x6b927d53caa5125cdba9255612d524976c691f8672796c3f0885ba2c5b3af1ad
15. 0x6dc40f983a3840a0ad927a9ca17f4ff1e3b649a6c735e2a09b140db7c2caf13b
16. 0x703f95866af09c5e5d6ead7411e9a10f964a41a2aff64d4a55ff0053c023a023
17. 0xd0651cb9bc8155eb52b5247d506e74b8a935057dc190ba52091702ac25ed3a40
18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae