← The evidence ledger
Evidence row 126950
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://x402.tokenizen.nl/api/bug-intel-quick
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 8eadf74e0337154e73dbb4f7ee15b7b5a5e241dc168e1d0791d8bbf9b47e6e97
- Leaf
- 0x6bd71ee3b047e9f8d0e747d301c3942ab0994ee8d58492deca654c243fb06d82
What was observed
{
"endpoints": [
[
"x402",
"https://x402.tokenizen.nl/api/bug-intel-quick"
]
],
"name": "x402.tokenizen.nl/api/bug-intel-quick",
"owner_address": "0x015eb036560216b3051339061ff68a207e0fe88f",
"raw": {
"accepts": [
{
"amount": "1000000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxAmountRequired": "1000000",
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0x015Eb036560216B3051339061FF68A207E0fe88f",
"scheme": "exact"
}
],
"description": "Bug Bounty Intelligence, quick scan: unverified hypotheses for the Solidity in a public GitHub repo, the 15 the model is most confident about. Not an audit. The report states how much of the code it read. How often the scan finds known issues in closed audit contests, including the misses, is published in the repository. The full scan at /api/bug-intel adds 15 lower-confidence hypotheses for $5. Usually done within a minute or two.",
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"contact": "jij@voorbeeld.nl",
"repo": "owner/repo"
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"estimatedHours": 24,
"jobId": "bi-1786800000",
"note": "Poll pollUrl tot status = \"complete\".",
"pollUrl": "https://x402.tokenizen.nl/api/bug-intel/bi-1786800000",
"price_paid_usd": "1.00",
"repo": "owner/repo",
"reportUrl": "https://x402.tokenizen.nl/api/bug-intel/bi-1786800000/report",
"status": "queued"
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"type": "object"
},
"bodyType": {
"type": "string"
},
"method": {
"enum": [
"GET",
"POST"
],
"type": "string"
},
"queryParams": {
"additionalProperties": {
"type": "string"
},
"properties": {},
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type",
"example"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
},
"offer-receipt": {
"info": {
"offers": [
{
"acceptIndex": 0,
"format": "eip712",
"payload": {
"amount": "1000000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"network": "eip155:8453",
"payTo": "0x015Eb036560216B3051339061FF68A207E0fe88f",
"resourceUrl": "https://x402.tokenizen.nl/api/bug-intel-quick",
"scheme": "exact",
"validUntil": 1792957516,
"version": 1
},
"signature": "0x4d6d2549b529226bf892abcc256023d3d9dfd3ba949a2091c2d0df3e0a6288b4556caa677122ec0b1ff476bd67be4de3cff105ac65b939358dcd92e21db246ea1b"
}
]
}
},
"piprail": {
"client": {
"note": "No proprietary client is required. Any x402 client that implements the exact scheme on eip155:8453 can pay this endpoint."
},
"docs": {
"agents": "https://github.com/holistis/agent-receipt-verify",
"home": "https://tokenizen.nl",
"pay": "https://x402.org"
},
"instruction": "tokenizen x402 payment endpoint. Pay 1.00 USDC on eip155:8453 to 0x015Eb036560216B3051339061FF68A207E0fe88f with an EIP-3009 signature in the PAYMENT-SIGNATURE header. The receipt you get back can be verified independently with npx -y agent-receipt-verify. Docs: https://tokenizen.nl.",
"name": "tokenizen vulnerability pattern search",
"pay": [
{
"amount": "1000000",
"amountFormatted": "1.00",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"how": "Sign an EIP-3009 transferWithAuthorization for this amount to payTo and resubmit with the PAYMENT-SIGNATURE header. Any x402 client that speaks the exact scheme works.",
"network": "eip155:8453",
"payTo": "0x015Eb036560216B3051339061FF68A207E0fe88f",
"scheme": "exact",
"symbol": "USDC"
}
],
"protocol": "x402",
"verify": {
"note": "The receipt this endpoint returns can be checked independently, without trusting us.",
"source": "https://github.com/holistis/agent-receipt-verify",
"tool": "npx -y agent-receipt-verify"
},
"version": "2",
"what": "This is an x402 \"402 Payment Required\" endpoint. Pay one of the offered rails to access it."
}
},
"lastUpdated": "2026-10-25T18:45:24.328Z",
"quality": {
"l30DaysTotalCalls": 1,
"l30DaysUniquePayers": 1,
"lastCalledAt": "2026-10-25T18:45:23.912Z"
},
"resource": "https://x402.tokenizen.nl/api/bug-intel-quick",
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Bug Bounty Intelligence, quick scan: unverified hypotheses for the Solidity in a public GitHub repo, the 15 the model is most confident about. Not an audit. The report states how much of the code it read. How often the scan finds known issues in closed audit contests, including the misses, is published in the repository. The full scan at /api/bug-intel adds 15 lower-confidence hypotheses for $5. Usually done within a minute or two."
}What the leaf hashes
{"body":"8eadf74e0337154e73dbb4f7ee15b7b5a5e241dc168e1d0791d8bbf9b47e6e97","id":126950,"kind":"listing","method":"baseline/1","observed_us":1793025637289790,"prev":null,"subject":"x402_bazaar:https://x402.tokenizen.nl/api/bug-intel-quick","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0x6bd78d455d721c4df0701cffc521704cbdcb43c5ec4e51a24885991492c22ba4
- 0x7410dbf0e0b25f9bf51e261395f00d21499a5270c7bd14c494d0ed58a0a0df36
- 0xeffba7ab69bd5e98529a1c380f4d40b352bfa7ea1f65f3f99065c21c77caab1d
- 0xc37a2ff7825a05cf85c70722820820bc4442609c8b1e1267a774bada637a7c36
- 0x7144e3f3040f1368ab3f4631315f9799df25fcc4a9d932d547f338d7eaf1b39b
- 0x7ebad84eeac89cd539e970d08af63ec1712b20ec91651b806de7f7f818100d10
- 0x14b7a6c0e84ca22a6fd883277988414b19c3ba0af6e3f2b9d75e9bf286993955
- 0x288174e53436b3cb4530a63a9b515c97f3dc33e7603a5d9f8c342fc14e6227be
- 0x4094053e5ab988e2bf8c0a3177628d39bdc8b14096a2009d67346fc43158c4e6
- 0x6a9d75996732347a0b42cd7298726bdcf5ff4155144ec98135ea4de4fe5b6666
- 0xdfaea4285192101e7ab6e8e71853c71cef08df31a416be7a9f92f34cf897e13e
- 0x2a304c51963b65e3ca818b638b2e9a98297b7d6b6a3e14ecca2501aa13b9f556
- 0x9dc4d6f64bc3c323d2c45a28209068cd473b6979bd632a0d694bf94d19bc39df
- 0xfc9b5a81a7a83a1c735a4fe64590beb9db14d2366f463161358af28c3ea9a81d
- 0xa2d436d488e3600b0e5c3e3ed9c9234cd52853c59830b786334fd0c4292d9f40
- 0x47b89901b0f07938a6b9a66ddf35683903f79d756a7c7763665fd632758b08d0
- 0x9a83be955a206deb65b995adfd92c58fa31c95fbbf926bd199d300e70b08b26d
- 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
- 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae